CVE-2019-1010083: Palletsprojects Flask

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

The Pallets Project Flask before 1.0 is affected by: unexpected memory usage. The impact is: denial of service. The attack vector is: crafted encoded JSON data. The fixed version is: 1. NOTE: this may overlap CVE-2018-1000656.

Affected products

• Palletsprojects Flask: before 1.0 (fixed in 1.0)

Published 2019-07-17. Last modified 2026-06-17.