Search results

[Security] Multiple CRITICAL vulnerabilities: API CSRF (csrf_exempt + allow_browser_login), role-management privilege escalation, user IDOR

Status: Open.

#2466 In dpgaspar/Flask-AppBuilder;

· Galaxync opened on Jun 22, 2026

find_user via email is case-sensitive

Status: Open.

#2463 In dpgaspar/Flask-AppBuilder;

· chucklay opened on Jun 18, 2026

[Vulnerability] Account Takeover via Trusted preferred_username in Flask-AppBuilder OAuth Providers

Status: Open.

#2458 In dpgaspar/Flask-AppBuilder;

· AAtomical opened on May 28, 2026

wtforms 3.3.0 coming soon

Status: Open.

#2456 In dpgaspar/Flask-AppBuilder;

· azmeuk opened on May 10, 2026

Issue with long process

Status: Open.

#2454 In dpgaspar/Flask-AppBuilder;

· Jhdeval opened on Apr 24, 2026

Latvian localization

Status: Open.

#2439 In dpgaspar/Flask-AppBuilder;

· EPoikans opened on Mar 12, 2026

Sequences with increment=1 are incompatible with multi-master MariaDB Galera clusters

Status: Open.

#2429 In dpgaspar/Flask-AppBuilder;

· pedrorosadodias opened on Feb 10, 2026

Flask-AppBuilder 5.0.2 incompatible with marshmallow 4.x / marshmallow-sqlalchemy 1.x

Status: Open.

#2425 In dpgaspar/Flask-AppBuilder;

· sp-ealjohani opened on Jan 23, 2026

DLL load failed

Status: Open.

#2424 In dpgaspar/Flask-AppBuilder;

· EnriqueGautoSand opened on Jan 20, 2026

FR: Support Python 3.14

Status: Open.

#2422 In dpgaspar/Flask-AppBuilder;

· r-richmond opened on Jan 5, 2026

function that generates pagination links break with multiple filters of the same type

Status: Open.

#2420 In dpgaspar/Flask-AppBuilder;

· befuhro opened on Dec 10, 2025

Problems with the picker datetime

Status: Open.

#2408 In dpgaspar/Flask-AppBuilder;

· emartinezpangaea opened on Nov 5, 2025