CompatHub
Check EOL

Flask 2 lifecycle

Current status

standard supportlow

Flask 2 is currently in standard support.

Security: 4 tracked advisories affecting this line. Details below — lifecycle and vulnerability status are separate.

Official lifecycle source: Flask PyPI releases

Support phase
standard support
End of life
Not officially published
Latest release
2.2.1
Released
3 Aug 2022

At a glance

Version line
2
Initial release
11 May 2021
Lifecycle phase
standard support
Latest stable
2.2.1
Latest release date
3 Aug 2022
EOL
Not officially published
Risk
low
Releases tracked
18

Lifecycle timeline

Phases from published LifecyclePeriod records. Missing phases are not inferred.

  1. Release

    11 May 2021

  2. standard supportcurrent

    11 May 2021 → —

    Source: Flask PyPI releases

Flask 2 is currently in standard support.

Upgrade options

Newer supported Flask version lines from CompatHub lifecycle data. Compatibility and security context use existing evidence only.

You are on Flask 2

Supported

Supported upgrade options

Open full upgrade planner for Flask 2 →

Security

Advisories affecting Flask 2 (OSV.dev evidence). Known exploited status, due dates, and ransomware use from CISA KEV when matched.

Known vulnerabilities
4
Known exploited
0
Highest CVSS
—
  • CVE-2026-27205PYSEC-2026-2151
    Affected:
    <3.1.3
    Fixed in:
    3.1.3
    Source:
    OSV source · Advisory
  • CVE-2026-27205GHSA-68rp-wp8r-4726

    Flask session does not add `Vary: Cookie` header when accessed in some ways

    Affected:
    <3.1.3
    Fixed in:
    3.1.3
    Source:
    OSV source · Advisory
  • CVE-2023-30861PYSEC-2023-62
    Affected:
    >=2.3.0,<2.3.2
    Fixed in:
    2.3.2
    Source:
    OSV source · Advisory
  • CVE-2023-30861GHSA-m2qf-hxjv-5gpq

    Flask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie header

    Affected:
    >=2.3.0,<2.3.2; <2.2.5
    Fixed in:
    2.3.2, 2.2.5
    Source:
    OSV source · Advisory

Latest release

2.2.1

Released 3 Aug 2022 · stable

https://pypi.org/pypi/Flask/2.2.1/json

Previous releases

  • 2.2.2

    8 Aug 2022

  • 2.2.3

    15 Feb 2023

  • 2.2.0

    2 Aug 2022

Release history

18 concrete releases tracked for this line.

VersionRelease dateChannelSource
2.2.02 Aug 2022stableSource
2.2.13 Aug 2022stableSource
2.2.28 Aug 2022stableSource
2.2.315 Feb 2023stableSource
2.2.425 Apr 2023stableSource
2.2.52 May 2023stableSource
2.3.025 Apr 2023stableSource
2.3.125 Apr 2023stableSource
2.3.21 May 2023stableSource
2.3.321 Aug 2023stableSource
2.0.011 May 2021stableSource
2.0.121 May 2021stableSource
2.0.24 Oct 2021stableSource
2.0.314 Feb 2022stableSource
2.1.028 Mar 2022stableSource
2.1.130 Mar 2022stableSource
2.1.228 Apr 2022stableSource
2.1.313 Jul 2022stableSource

Release activity

Total releases
18
Last 30 days
0
Last 90 days
0
Avg. interval
~49 days
Most recent
3 Aug 2022

Should I use this version?

Suitable for new deployments

Flask 2 is currently supported (standard support).

Version comparison

Compact comparison against the nearest relevant release lines.

23
Statusstandard supportstandard support
Latest release2.2.03.0.0
EOLNot publishedNot published
Risklowlow

Compatibility

Evidence-backed compatibility results involving Flask 2. Only combinations CompatHub can evaluate from upstream sources are listed.

Compatible targets

Open Compatibility Explorer →

Sources

Where this information comes from.

Lifecycle sources

Release sources

Data coverage

Last checked = last successful upstream check. Latest source update = when upstream content last changed.

Releases tracked
18
Lifecycle periods
1
EOL
Not officially published
Provenance records
2
Data last checked
2 Sept 2026
Latest source update
2 Sept 2026

EOL: Not officially published

Other Flask versions