CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

security/py-flask-httpauth 4.8.0

Basic and Digest HTTP authentication for Flask routes

Port info

Maintainer
rm@FreeBSD.org
Packages
latest: 4.8.0
Upstream
Higher version available: 4.8.1
Last update
to 4.8.0 · 8efcc1c369
Quarterly
2026Q4: 4.8.0
WWW
https://github.com/miguelgrinberg/flask-httpauth/
Links
cgit · VuXML

Install

Package
# pkg install py312-Flask-HTTPAuth
installs 4.8.0 from latest; from quarterly (2026Q4) 4.8.0
Port
# cd /usr/ports/security/py-flask-httpauth && make install clean
Size
16 KiB download · 63 KiB installed
Depends on
lang/python312 3.12.15, www/py-flask 3.1.3
License
MIT

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 164.8.04.8.0–
FreeBSD 154.8.04.8.0–
FreeBSD 144.8.04.8.04.8.0

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 154.8.04.8.0–
FreeBSD 144.8.04.8.04.8.0

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed (1)

The CVE record lists the packaged version 4.8.0 as affected, and no VuXML entry names the CVE. What does this mean?

CVECVSSPublishedDescription
CVE-2026-345316.52026-04-01Flask-HTTPAuth provides Basic, Digest and Token HTTP authentication for Flask routes. Prior to version 4.8.1, in a situation where the client makes a request to a token …

VuXML only (0)

Listed in VuXML, the packaged version 4.8.0 is still in the affected range; pkg audit reports it. What does this mean?

None.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (28)

Po-Chuan Hsieh (sunpoet) · 4.8.0
*: Fix build after 3232af18957315da73e0e4105cac869d8cb3c6b1 (www/py-flask PORTNAME change)

Approved by:	portmgr (blanket)
8efcc1c369
Ruslan Makhmatkhanov (rm) · 4.8.0
security/py-flask-httpauth: update to 4.8.0

This release fixing runtime regression.
Convert to pep517 while here
PR:		273033
Reported by:	ruben@verweg.com
787722b9df
Rene Ladan (rene) · 4.7.0
all: remove explicit versions in USES=python for "3.x+"

The logic in USES=python will automatically convert this to 3.8+ by
itself.

Adjust two ports that only had Python 3.7 mentioned but build fine
on Python 3.8 too.

finance/quickfix: mark BROKEN with PYTHON

libtool: compile:  c++ -DHAVE_CONFIG_H -I. -I../.. -I -I. -I.. -I../.. -I../C++ -DLIBICONV_PLUG -DPYTHON_MAJOR_VERSION=3 -Wno-unused-variable -Wno-maybe-uninitialized -O2 -pipe -DLIBICONV_PLUG -fstack-protector-strong -fno-strict-aliasing -DLIBICONV_PLUG -Wall -ansi -Wno-unused-command-line-argument -Wpointer-arith -Wwrite-strings -Wno-overloaded-virtual -Wno-deprecated-declarations -Wno-deprecated -std=c++0x -MT _quickfix_la-QuickfixPython.lo -MD -MP -MF .deps/_quickfix_la-QuickfixPython.Tpo -c QuickfixPython.cpp  -fPIC -DPIC -o .libs/_quickfix_la-QuickfixPython.o
warning: unknown warning option '-Wno-maybe-uninitialized'; did you mean '-Wno-uninitialized'? [-Wunknown-warning-option]
QuickfixPython.cpp:175:11: fatal error: 'Python.h' file not found
          ^~~~~~~~~~
1 warning and 1 error generated.

Reviewed by:	portmgr, vishwin, yuri
Differential Revision:	<https://reviews.freebsd.org/D40568>
3d9a815d9c
Dmitry Marakasov (amdmi3) · 4.7.0
*/*: rename CHEESESHOP to PYPI in MASTER_SITES

PR:			267994
Differential revision:	D37518
Approved by:		bapt
77d68471ad
Stefan Eßer (se) · 4.7.0
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 4.7.0
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Ruslan Makhmatkhanov (rm) · 4.7.0
security/py-flask-httpauth: update to 4.7.0

Changes:
https://github.com/miguelgrinberg/Flask-HTTPAuth/blob/main/CHANGES.md

PR:		262503
Reported by:	ruben@verweg.com
389aa8a1e8
Mathieu Arnold (mat) · 3.3.0
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 3.3.0
Remove # $FreeBSD$ from Makefiles.
305f148f48
Antoine Brodin (antoine) · 3.3.0
Drop python 2.7 support from a few ports

With hat:	portmgr
aa7a6c429e
Ruslan Makhmatkhanov (rm) · 3.3.0
security/py-flask-httpauth: update to 3.3.0
490e58696a
Ruslan Makhmatkhanov (rm) · 3.2.4
security/py-flask-httpauth: update to 3.2.4
dfcab4ebf7
Mathieu Arnold (mat) · 3.2.3
Use PY_FLAVOR for dependencies.

FLAVOR is the current port's flavor, it should not be used outside of
this scope.

Sponsored by:	Absolight
4376dbbb58
Antoine Brodin (antoine) · 3.2.3
Simplify some USES=python

With hat:	portmgr
377901b804
Mathieu Arnold (mat) · 3.2.3
Convert Python ports to FLAVORS.

Ports using USE_PYTHON=distutils are now flavored.  They will
  automatically get flavors (py27, py34, py35, py36) depending on what
  versions they support.

  There is also a USE_PYTHON=flavors for ports that do not use distutils
  but need FLAVORS to be set.  A USE_PYTHON=noflavors can be set if
  using distutils but flavors are not wanted.

  A new USE_PYTHON=optsuffix that will add PYTHON_PKGNAMESUFFIX has been
  added to cope with Python ports that did not have the Python
  PKGNAMEPREFIX but are flavored.

  USES=python now also exports a PY_FLAVOR variable that contains the
  current python flavor.  It can be used in dependency lines when the
  port itself is not python flavored.  For example, deskutils/calibre.

  By default, all the flavors are generated.  To only generate flavors
  for the versions in PYTHON2_DEFAULT and PYTHON3_DEFAULT, define
  BUILD_DEFAULT_PYTHON_FLAVORS in your make.conf.

  In all the ports with Python dependencies, the *_DEPENDS entries MUST
  end with the flavor so that the framework knows which to build/use.
  This is done by appending '@${PY_FLAVOR}' after the origin (or
  @${FLAVOR} if in a Python module with Python flavors, as the content
  will be the same).  For example:

    RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}six>0:devel/py-six@${PY_FLAVOR}

PR:		223071
Reviewed by:	portmgr, python
Sponsored by:	Absolight
Differential Revision:	https://reviews.freebsd.org/D12464
551be3c723
Ruslan Makhmatkhanov (rm) · 3.2.3
security/py-flask-httpauth: update to 3.2.3
782b70018c
Ruslan Makhmatkhanov (rm) · 3.2.2
security/py-flask-httpauth: update to 3.2.2
e21f75a4c6
Mathieu Arnold (mat) · 3.2.1
http://github.com redirects to https://github.com, spare everyone a redirect.

Sponsored by:	Absolight
bbf7ef5615
Ruslan Makhmatkhanov (rm) · 3.2.1
security/py-flask-httpauth: update to 3.2.1
2c263a0301
Ruslan Makhmatkhanov (rm) · 3.2.0
security/py-flask-httpauth: update to 3.2.0
b70e3d635e
Ruslan Makhmatkhanov (rm) · 3.1.1
security/py-flask-httpauth: update to 3.1.1
a88af2f360
Mathieu Arnold (mat) · 3.1.0
Remove ${PORTSDIR}/ from dependencies, categories r, s, t, and u.

With hat:	portmgr
Sponsored by:	Absolight
597afc47ba
Ruslan Makhmatkhanov (rm) · 3.1.0
security/py-flask-httpauth: update to 3.1.0
90bd929bfe
Ruslan Makhmatkhanov (rm) · 3.0.2
security/py-flask-httpauth: update to 3.0.2
8579cd3560
Ruslan Makhmatkhanov (rm) · 2.7.1
security/py-flask-httpauth: update to 2.7.1
aea0a2a722
Ruslan Makhmatkhanov (rm) · 2.7.0
security/py-flask-httpauth: update to 2.7.0
ce9699179a
Ruslan Makhmatkhanov (rm) · 2.5.0
security/py-flask-httpauth: update to 2.5.0
e242fb4ba7
Ruslan Makhmatkhanov (rm) · 2.4.0
Basic and Digest HTTP authentication for Flask routes.

WWW: http://github.com/miguelgrinberg/flask-httpauth/
f848c882de