MEDIUM
pallets-eco
CVE published 2026-07-20
CVE-2026-46715
Flask-Security-Too, a library that adds security features to Flask applications, has a vulnerability in its OAuth reauthentication flow. Specifically, version 5.8.0 incorrectly marks a session as fresh after verifying an OAuth account that belongs to a different user. This allows an attacker who can operate an already-authenticated but stale victim session to complete OAuth verification using their own OA [truncated]