Flask-WTF@0.3.2 vulnerabilities

Form rendering, validation, and CSRF protection for Flask with WTForms.

Known vulnerabilities in the Flask-WTF package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
M Cross-site Request Forgery (CSRF) flask-wtf is an integration of Flask and WTForms, including CSRF, file upload, and reCAPTCHA. Affected versions of this package are vulnerable to Cross-site Request Forgery (CSRF) because of missing CSRF tokens on all of the templates excluding `Jinja2`. How to fix Cross-site Request Forgery (CSRF)? Upgrade `flask-wtf` to version 0.9.5 or higher.	[,0.9.5)