https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-06T18:50:04.710198+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2025-43931 fkie_cve-2025-43931 2026-11-06T18:50:04.744404+00:00

flask-boilerplate through a170e7c allows account takeover via the password reset feature because SERVER_NAME is not configured and thus a reset depends on the Host HTTP header.

 https://db.gcve.eu/vuln/ghsa-pqm7-cvx7-969j GHSA-pqm7-cvx7-969j 2026-11-06T18:50:04.744480+00:00

flask-boilerplate through a170e7c allows account takeover via the password reset feature because SERVER_NAME is not configured and thus a reset depends on the Host HTTP header.