pypi flask-httpauth vulnerabilities

Latest pypi flask-httpauth CVEs

Newest publication first

1. CVE-2026-34531 Flask-HTTPAuth invokes token verification callback when missing or empty token was given by client

   Published 2026-04-01

   High·CVSS 8.2 EPSS 0.34%

   Flask-HTTPAuth provides Basic, Digest and Token HTTP authentication for Flask routes. Prior to version 4.8.1, in a situation where the client makes a request to a token protected resource without passing a token, or passing an empty token, Flask-HTTPAuth would invoke the applicat...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.