Security: saaa99999999/flask-restful-login
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
Password stored in plaintext without hashing (CWE-312)GHSA-j2j3-vj93-57gr published
May 17, 2026 by saaa99999999Moderate -
[HIGH CWE-532] User passwords exposed in application logs via __repr__GHSA-prx3-4xgf-xmx4 published
May 16, 2026 by saaa99999999High -
[CRITICAL CWE-798] Missing Flask SECRET_KEYGHSA-4m35-54gh-54mf published
May 16, 2026 by saaa99999999Critical -
[CRITICAL CWE-1392] Default admin accounts with hardcoded credentialsGHSA-qw3h-hq57-78mm published
May 16, 2026 by saaa99999999Critical -
[CRITICAL CWE-798] Hardcoded JWT signing secretsGHSA-cwq2-mg56-g3q2 published
May 16, 2026 by saaa99999999Critical -
[CRITICAL CWE-256] Plaintext password storage — no hashingGHSA-3g7v-cg89-f3ph published
May 16, 2026 by saaa99999999Critical
Learn more about advisories related to saaa99999999/flask-restful-login in the GitHub Advisory Database