UnratedFix available
Flask 3.1.1 fix release
Type: patchSources: Flask
Flask 3.1.1 fixes signing key selection order when key rotation is enabled via SECRET_KEY_FALLBACKS.
- Products
- Flask
- Affected versions
- Not specified
- Fixed versions
- 3.1.1
- CVEs
- Not specified
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 29 Oct 2026, 16:10 UTC · Revision 1
Source evidence
Flask 3.1.1 fixes signing key selection order when key rotation is enabled via SECRET_KEY_FALLBACKS.
Fix signing key selection order when key rotation is enabled via SECRET_KEY_FALLBACKS. GHSA-4grg-w6v8-c28g
Flask
Fixed versions: 3.1.1
Prerequisites: key rotation is enabled via SECRET_KEY_FALLBACKS
Complete source record
{
"id": "8ce81a1602f71422135da98f36286361342bd9e9e524fb613dacde4fd4072de3",
"url": "https://github.com/pallets/flask/releases/tag/3.1.1",
"method": "llm",
"payload": {
"kind": "patch",
"title": "Flask 3.1.1 fix release",
"summary": "Flask 3.1.1 fixes signing key selection order when key rotation is enabled via SECRET_KEY_FALLBACKS.",
"evidence": "Fix signing key selection order when key rotation is enabled via SECRET_KEY_FALLBACKS. GHSA-4grg-w6v8-c28g",
"products": [
{
"name": {
"value": "Flask",
"evidence": "This is the Flask 3.1.1 fix release"
},
"prerequisites": [
{
"value": "key rotation is enabled via SECRET_KEY_FALLBACKS",
"evidence": "when key rotation is enabled via SECRET_KEY_FALLBACKS"
}
],
"fixed_versions": [
{
"value": "3.1.1",
"evidence": "This is the Flask 3.1.1 fix release"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"fixed_cves": [],
"related_cves": [],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "github-pallets-flask",
"document_id": 22092,
"published_at": "2025-05-13T16:54:02+00:00"
}