https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 14:43:16 +0000 https://db.gcve.eu/vuln/ghsa-p8q5-cvwx-wvwp <p><strong>Affected:</strong> PyPI: flask-appbuilder</p> <p>### Impact User enumeration in database authentication in Flask-AppBuilder &lt;= 4.5.3 and werkzeug &gt;= 3.0.0. Allows for a non authenticated user to enumerate existing usernames by timing the response time from the server when brute forcing requests to login.</p> <p>### Patches</p> <p>Upgrade to flask-appbuilder&gt;=4.5.3</p> <p>### Workarounds Downgrade werkzeug to &lt;3.0.0</p> <p>### References _Are there any links users can visit to find out more?_</p> <p><strong>Affected:</strong> PyPI: flask-appbuilder</p> <p>### Impact User enumeration in database authentication in Flask-AppBuilder &lt;= 4.5.3 and werkzeug &gt;= 3.0.0. Allows for a non authenticated user to enumerate existing usernames by timing the response time from the server when brute forcing requests to login.</p> <p>### Patches</p> <p>Upgrade to flask-appbuilder&gt;=4.5.3</p> <p>### Workarounds Downgrade werkzeug to &lt;3.0.0</p> <p>### References _Are there any links users can visit to find out more?_</p> https://db.gcve.eu/vuln/ghsa-p8q5-cvwx-wvwp