影响你的用户
项目发布的内容里有 1 个漏洞，最严重的在前。
可能让你的服务崩溃或变慢
werkzeug 3.1.81 个漏洞已在 3.1.9 中修复一个影响未说明的漏洞。 从网上任何地方都行，不需要账号。
- GHSA-g6x2-hccm-hh4mWerkzeug safe_join() allows Windows special device names
仅内部
开发工具、测试、示例、文档和基准测试：它们不会影响你的用户，所以从不计入答案。
certifi 2026.7.221 个漏洞已在 2026.10.19 中修复某项防护比应有的弱。 从网上任何地方都行，不需要账号。
- GHSA-6q48-6c7w-9gw2certifi bundles emSign root CAs with compromised intermediate CA keys
uv 0.12.01 个漏洞已在 0.13.4 中修复某项防护比应有的弱。 从网上任何地方都行，不需要账号。
- GHSA-hq85-5cpj-mr62uv's bundled CA store trusts an emSign root whose intermediate CA keys are compromised
virtualenv 21.7.119 个漏洞已在 21.14.9 中修复有人可以在它运行的地方运行自己的代码。 从网上任何地方都行，不需要账号。
- GHSA-94p9-xgh2-xp45virtualenv: Downloaded seed wheels (pip/setuptools) are not integrity-checked before use
- GHSA-394h-qwmc-48pfvirtualenv: Xonsh activation literals depend on the script decoding codec
- GHSA-5vjq-rrrf-7h2qvirtualenv activate runs commands from the environment name in zsh with PROMPT_SUBST
- GHSA-6w3r-xr62-4xcpvirtualenv: Bash prompt values can change meaning under older compatibility modes
- GHSA-8rjx-v5ww-45ppvirtualenv activation scripts run code from a path that contains a placeholder name
- GHSA-c947-3pg5-gm8qvirtualenv activate.fish runs commands from a path or prompt with a backslash before a quote
- GHSA-c978-59m8-c77vvirtualenv: Generated POSIX console launchers interpret destination paths as shell syntax
- GHSA-p58f-9548-mpm2virtualenv bash and fish activation scripts execute commands embedded in paths
- GHSA-vxj4-q4g9-crj7virtualenv bash activate runs commands from an environment name with a backslash before $
- GHSA-x78j-v8h9-3j2qvirtualenv: Command injection via --prompt in activate.bat (batch activator)
- GHSA-hhxq-47xx-j5xxvirtualenv: Seed replacement does not contain metadata deletion paths
- GHSA-9h9j-4vrj-gf7gvirtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injection
- GHSA-fc2g-4w5p-6whmvirtualenv: Seeded files retain permissions from an older cache
- GHSA-43mp-35q3-x3fqvirtualenv: Deletion recovery can change a symlink target's mode
- GHSA-558c-9hv2-4prjvirtualenv: Generated files can follow existing destination links
- GHSA-cw65-gx24-rc82virtualenv: Builtin creation follows linked environment directories
- GHSA-494p-63j8-28p3virtualenv: Downloaded wheel selection and caching precede verification
- GHSA-cx28-75q4-x26qvirtualenv: Pip seeding with download omits wheel digest verification
- GHSA-qmx5-4p3x-wvqfvirtualenv: Venv configuration readback can reinterpret path boundaries
jinja2 3.1.25 个漏洞已在 3.1.6 中修复有人可以在它运行的地方运行自己的代码。 必须能接触到这台机器。
- GHSA-cpwx-vrp4-4pq7Jinja2 vulnerable to sandbox breakout through attr filter selecting format method
- GHSA-gmj6-6f8f-6699Jinja has a sandbox breakout through malicious filenames
- GHSA-q2x7-8rv6-6q7hJinja has a sandbox breakout through indirect reference to format method
- GHSA-h5c8-rqwp-cp95Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter
- GHSA-h75v-3vvj-5mfjJinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter
cryptography 49.0.01 个漏洞已在 50.0.0 中修复有人可以读到本不该看到的数据。 从网上任何地方都行，不需要账号。
- GHSA-g6cj-pr64-35w5cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing
werkzeug 2.3.38 个漏洞已在 3.1.9 中修复有人可以读到本不该看到的数据。 从网上任何地方都行，不需要账号。
- GHSA-f9vj-2wh5-fj8jWerkzeug safe_join not safe on Windows
- GHSA-2g68-c3qc-8985Werkzeug debugger vulnerable to remote execution when interacting with attacker controlled domain
- GHSA-q34m-jh98-gwm2Werkzeug possible resource exhaustion when parsing file data in forms
- GHSA-hrfv-mqp8-q5rwWerkzeug DoS: High resource usage when parsing multipart/form-data containing a large part with CR/LF character at the beginning
- GHSA-29vq-49wr-vm6x Werkzeug safe_join() allows Windows special device names
- GHSA-87hc-h4r5-73f7 Werkzeug safe_join() allows Windows special device names with compound extensions
- GHSA-g6x2-hccm-hh4mWerkzeug safe_join() allows Windows special device names
- GHSA-hgf8-39gv-g3f2Werkzeug safe_join() allows Windows special device names
filelock 3.32.23 个漏洞已在 4.2.1 中修复有人可以篡改数据或文件。 必须能接触到这台机器。
- GHSA-v4x8-3wr5-3wq8filelock ReadWriteLock: SQLite reopens the lock database by name, so a planted symlink or journal file makes the lock user's process overwrite or unlink its own files
- GHSA-567q-5qvw-pf92filelock: On Windows an oplock on a soft lock's marker holds SoftFileLock.acquire() past its timeout and blocks the stale break
- GHSA-9vhv-jxww-xfm5filelock: ReadWriteLock on Windows acts on SQLite side files another local user places beside its database
urllib3 2.7.03 个漏洞已在 2.8.0 中修复有人可以让它崩溃或卡死。 从网上任何地方都行，不需要账号。
- GHSA-vxq7-64xx-v4gwurllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory
- GHSA-gh4c-6fx4-qh6gurllib3: Chunked Deflate streaming can enter an infinite loop
- GHSA-8988-9cw3-xx77urllib3: HTTPS proxy TLS configuration may be ignored or overridden
flask 2.3.21 个漏洞已在 3.1.3 中修复一个影响未说明的漏洞。 从网上任何地方都行，不需要账号。
- GHSA-68rp-wp8r-4726Flask session does not add `Vary: Cookie` header when accessed in some ways
有变化时发邮件给我
先发一封邮件请你确认，之后只在结论变差或出现新的严重漏洞时才发：每天最多一封，若攻击者正在利用则立即发送。一键退订。
把徽章放进你的 README
它显示这个答案，并随答案变化。
[](https://istheinternetok.com/r/pallets/flask/)读取自 examples/celery/requirements.txt, uv.lock。