Flask vulnerabilities (Root)

2 vulnerabilities.

• Flask Root Flask session does not add `Vary: Cookie` header when accessed in some ways CVE-2026-27205 Fix available 2.3 LowFebruary 19, 2026
• Flask Root Flask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie header CVE-2023-30861 Public exploitFix available 7.5 HighMay 1, 2023