Software catalogue for The Pallets Projects
Latest security bulletins
| Secuity bulletin | Severity | Status | Published |
|---|---|---|---|
| SB2026030562: Improper Handling of Windows Device Names in Werkzeug | Low | 05.03.2026 | |
| SB2026022322: Improper Handling of Windows Device Names in Werkzeug | Medium | 23.02.2026 | |
| SB2026010911: Improper Handling of Windows Device Names in Werkzeug | Medium | 09.01.2026 | |
| SB2025120137: Improper Handling of Windows Device Names in Werkzeug | Medium | 01.12.2025 | |
| SB2025051380: Incorrect usage of signing key in Flask | Low | 13.05.2025 | |
| SB2025030628: Code execution in Jinja | Low | 06.03.2025 | |
| SB2024122789: Multiple vulnerabilities in Jinja | Low | 27.12.2024 | |
| SB2024103173: Multiple vulnerabilities in Werkzeug | Medium | 31.10.2024 | |
| SB2024052067: XSS in Jinja | Medium | 20.05.2024 | |
| SB2024050606: Remote code execution in Werkzeug | Medium | 06.05.2024 |