flaskbb

Products

ProductCVEsExploitedLatest
flaskbb3–Jul 21, 2026

Exploited and recent CVEs

  • CVE-2026-46556 Medium 6.5 FlaskBB: SSRF in get_image_info() via unrestricted avatar URL 0.4%
  • CVE-2026-22659 High 8.1 FlaskBB Authorization Bypass via Topic ID Manipulation 0.5%
  • CVE-2026-22660 High 7.2 FlaskBB Logic Flaw Authorization Group Deletion via Bulk AJAX Endpoint 0.6%