Mher Flower
1 CVEs affecting Mher Flower. Latest disclosed: 2026-10-12. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-51020 | Medium | 5.9 | 2026-10-12 | Flower before 2.2.0 contains a cross-site request forgery vulnerability because Tornado xsrf_cookies is disabled and the OAuth session cookie lacks SameSite. A… |