Use latest version on dogukanurker/flaskblog
contact: dogukanurker@icloud.com
Security: saaa99999999/FlaskBlog
Security
docs/SECURITY.md
-
IDOR in post/comment deletion, missing admin authorization, Flask debug mode enabled by defaultGHSA-p4mh-cq64-m6jg published
May 18, 2026 by saaa99999999High -
[HIGH CWE-601] Open redirect in login routeGHSA-mv9x-f4vp-6vf4 published
May 16, 2026 by saaa99999999High -
[CRITICAL CWE-862] Missing authorization in admin user managementGHSA-2qhw-p9hw-gcc5 published
May 16, 2026 by saaa99999999Critical -
[CRITICAL CWE-1392] Default admin account with well-known credentialsGHSA-xrjq-j949-qhq4 published
May 16, 2026 by saaa99999999Critical -
[CRITICAL CWE-798] Hardcoded SMTP credentials in app/settings.pyGHSA-f9v6-7c62-6652 published
May 16, 2026 by saaa99999999Critical
Learn more about advisories related to saaa99999999/FlaskBlog in the GitHub Advisory Database