Skip to content
Heist/ feed
Back to feed
UnratedFix available

Flask 3.1.1 fix release

Type: patchSources: Flask

Flask 3.1.1 fixes signing key selection order when key rotation is enabled via SECRET_KEY_FALLBACKS.

Products
Flask
Affected versions
Not specified
Fixed versions
3.1.1
CVEs
Not specified
Confirmed fixed CVEs
Not specified
Updated in this feed
29 Oct 2026, 16:10 UTC · Revision 1

Source evidence

Flask 3.1.1 fix release

github-pallets-flask · Original source

Published 13 May 2025, 16:54 UTC

Flask 3.1.1 fixes signing key selection order when key rotation is enabled via SECRET_KEY_FALLBACKS.

Fix signing key selection order when key rotation is enabled via SECRET_KEY_FALLBACKS. GHSA-4grg-w6v8-c28g

Flask

Fixed versions: 3.1.1

Prerequisites: key rotation is enabled via SECRET_KEY_FALLBACKS

Complete source record
{
  "id": "8ce81a1602f71422135da98f36286361342bd9e9e524fb613dacde4fd4072de3",
  "url": "https://github.com/pallets/flask/releases/tag/3.1.1",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "Flask 3.1.1 fix release",
    "summary": "Flask 3.1.1 fixes signing key selection order when key rotation is enabled via SECRET_KEY_FALLBACKS.",
    "evidence": "Fix signing key selection order when key rotation is enabled via SECRET_KEY_FALLBACKS. GHSA-4grg-w6v8-c28g",
    "products": [
      {
        "name": {
          "value": "Flask",
          "evidence": "This is the Flask 3.1.1 fix release"
        },
        "prerequisites": [
          {
            "value": "key rotation is enabled via SECRET_KEY_FALLBACKS",
            "evidence": "when key rotation is enabled via SECRET_KEY_FALLBACKS"
          }
        ],
        "fixed_versions": [
          {
            "value": "3.1.1",
            "evidence": "This is the Flask 3.1.1 fix release"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "github-pallets-flask",
  "document_id": 22092,
  "published_at": "2025-05-13T16:54:02+00:00"
}