Skip to content
vetkitChecksChangelogDocumentation

vetkit.py.flask.debug-enabled

The Flask/Werkzeug debugger is enabled. In production it exposes an interactive console (remote code execution).

Last updated:

Suite: Security

python

The Flask/Werkzeug debugger is enabled. In production it exposes an interactive console (remote code execution).

Category: SECURITY · Engine rule severity: WARNING

How to fix it

Drive debug mode from configuration and never enable it in deployed environments.

References

Source: packages/engine/rules/sast/python.yml.

Generated from shipped rule definitions at build time. Matching is a review signal, not proof of exploitability. “generic” denotes text matching, not complete language or framework coverage. Runtime configuration and available tools affect whether a rule runs.