PyPI · #1350 most downloaded on PyPI

flask-appbuilder

5.2.311M downloads/modpgaspar/flask-appbuilder ↗New releases in your daily digest, changelog included.

Simple and rapid application development framework, built on top of Flask. includes detailed security, auto CRUD generation for your models, google charts and much more.

Last release 2 days ago
16 Sep 2026
Release timing varies
gaps range from 8 days to 3 months
Nearly every release is documented
notes for 59 of the last 60 stable releases
Nothing withdrawn
no release was ever pulled
13 years old
387 releases · first in 2013

Release timeline

387 releases since 2013

Releases

4.5.4rc119 Feb 2025pre-release
Nothing published for this version
4.5.321 Jan 2025
chore: improve security models performance by @dpgaspar in https://github.com/dpgaspar/Flask-AppBuilder/pull/2293
What's Changed

chore: improve security models performance by @dpgaspar in https://github.com/dpgaspar/Flask-AppBuilder/pull/2293

feat: make fake password hash check configurable by @dpgaspar in https://github.com/dpgaspar/Flask-AppBuilder/pull/2301

refactor: enhance _get_list_widget and _list methods to accept additional kwargs by @gugupy in https://github.com/dpgaspar/Flask-AppBuilder/pull/2285

feat: Persian translations by @CodeWithEmad in https://github.com/dpgaspar/Flask-AppBuilder/pull/2278

Full Changelog: https://github.com/dpgaspar/Flask-AppBuilder/compare/v4.5.2...v4.5.3
Open source →
Additional notes2 sources agree
feat: Persian translations (#2278) [Emad Rad]

refactor: enhance _get_list_widget and _list methods to accept additional keyword arguments (#2285) [Gughanathan M]

feat: make fake password hash check configurable (#2301) [Daniel Vaz Gaspar]

chore: improve security models performance (#2293) [Daniel Vaz Gaspar]

2013201520172019202120232025

20132026

One column per quarter.

4.5.3rc121 Jan 2025pre-release

Nothing published for this version

4.5.223 Oct 2024

fix: hardcoded year removed from copyright by @CodeWithEmad in https://github.com/dpgaspar/Flask-AppBuilder/pull/2277

Patch release 4.5.2

What's Changed

fix: hardcoded year removed from copyright by @CodeWithEmad in https://github.com/dpgaspar/Flask-AppBuilder/pull/2277
fix: wtforms 3.2 breaking field_flags by @dpgaspar in https://github.com/dpgaspar/Flask-AppBuilder/pull/2279

New Contributors

@CodeWithEmad made their first contribution in https://github.com/dpgaspar/Flask-AppBuilder/pull/2277

Full Changelog: https://github.com/dpgaspar/Flask-AppBuilder/compare/v4.5.1...v4.5.2

Open source →

Additional notes2 sources agree

fix: wtforms 3.2 breaking field_flags (#2279) [Daniel Vaz Gaspar]
fix: hardcoded year removed from copyright (#2277) [Emad Rad]

Open source →

4.5.2rc123 Oct 2024pre-release

Nothing published for this version

4.5.12 Sept 2024Security3 sources agree

chore: bump dnspython to fix vulnerability (#2255) [Daniel Vaz Gaspar]

Patch release 4.5.1

feat: add no cache directive to login forms (#2266) [Daniel Vaz Gaspar]
chore: bump cryptography to 42.0.4 (#2238) [Daniel Vaz Gaspar]
docs: Fixing broken link (#2252) [Chase Jones]
fix: rate limiter key function (#2254) [Daniel Vaz Gaspar]
chore: bump dnspython to fix vulnerability (#2255) [Daniel Vaz Gaspar]

Open source →

4.5.1rc12 Sept 2024pre-release

Nothing published for this version

4.5.021 May 20243 sources agree

feat: REST API new select columns query param (#2242) [Daniel Vaz Gaspar]

Minor release 4.5.0

feat: REST API new select columns query param (#2242) [Daniel Vaz Gaspar]
chore: bump werkzeug to 3.0.3 (#2237) [Daniel Vaz Gaspar]
fix: Keycloak OAuth2, get groups as role_keys per default (#2235) [Andreas 'count' Kotes]
fix: Check if Oauth login with OKTA is correct (#1926) [Hojjat Ali Mohammadi]
docs: Update quickcharts.rst for typo gold to goal (#2217) [Abhinav Pareek]

Open source →

4.5.0rc120 May 2024pre-release

Nothing published for this version

4.4.123 Feb 20243 sources agree

fix: user search list on stats (#2211) [Daniel Vaz Gaspar]

Patch release 4.4.1:

fix: user search list on stats (#2211) [Daniel Vaz Gaspar]
fix: performance issues on user and roles list (#2209) [Daniel Vaz Gaspar]

Open source →

4.4.1rc223 Feb 2024pre-release

Nothing published for this version

4.4.019 Feb 2024Deprecated3 sources agree

chore: upgrade werkzeug and Flask, deprecate OpenID and MongoEngine (#2196) [Daniel Vaz Gaspar]

Minor release 4.4.0

chore(deps): bump the github-actions group with 4 updates (#2201) [dependabot[bot]]
fix: python versions setup.py (#2204) [Daniel Vaz Gaspar]
ci: refactor requirements structure and improve dependabot config (#2198) [Daniel Vaz Gaspar]
chore(deps): bump jinja2 from 3.0.3 to 3.1.3 (#2180) [dependabot[bot]]
fix: authentik test (#2199) [Daniel Vaz Gaspar]
feat: Added authentik as new identity provider (#2168) [Jasper Schoenmaker]
chore(deps): bump requests from 2.26.0 to 2.31.0 (#2050) [dependabot[bot]]
docs: updated Flask-Babel link and fix typo (#2166) [Gughanathan M]
chore: bump several non base dependencies (#2197) [Daniel Vaz Gaspar]
fix: Increase upper bound on marshmallow-sqlalchemy (#2191) [spike77453]
chore: remove email_validator constraint (#2167) [Marcus Lim]
chore: Upgrade to Pillow 10.0.1 (#2136) [Dosenpfand]
chore(docs): Update i18n.rst for Turkish (#2187) [coteli]
chore: upgrade werkzeug and Flask, deprecate OpenID and MongoEngine (#2196) [Daniel Vaz Gaspar]
feat: Turkish translations (#2185) [coteli]
feat: AUTH_REMOTE_USER_ENV_VAR config key for auth REMOTE_USER type (#2193) [Daniel Vaz Gaspar]
fix: don't load inactive users with sessions (#2192) [Daniel Vaz Gaspar]

Open source →

4.4.0rc119 Feb 2024pre-release

Nothing published for this version

4.3.117 Feb 20243 sources agree

fix: openID provider validation flow (#2186) [Daniel Vaz Gaspar]

Patch release 4.3.10

fix: openID provider validation flow (#2186) [Daniel Vaz Gaspar]
feat: support Auth0 OAuth2 (#2171) [Daniel Vaz Gaspar]

Open source →

4.3.11rc17 Feb 2024pre-release

Nothing published for this version

4.3.1020 Nov 20233 sources agree

fix: azure keep using upn if exists (#2163) [Daniel Vaz Gaspar]

Patch release 4.3.10

fix: azure keep using upn if exists (#2163) [Daniel Vaz Gaspar]
docs: Update shield of supported Python versions (#2156) [Dosenpfand]
docs: update security policy (#2155) [Daniel Vaz Gaspar]
docs: improve LDAP auth auth_roles_mapping (#2149) [Daniel Vaz Gaspar]
docs: Update security docs to reflect LDAP casing issues (#2098) [Anders Bogsnes]
fix: old API api column edit (#2134) [Daniel Vaz Gaspar]
chore: add bootstrap min map (#2148) [Daniel Vaz Gaspar]
chore: Add support for Python 3.10, 3.11, 3.12 and drop 3.7 (#2147) [Dosenpfand]
chore: use npm for all frontend dependencies (#2144) [Daniel Vaz Gaspar]

Open source →

4.3.10rc120 Nov 2023pre-release

Nothing published for this version

4.3.916 Oct 20233 sources agree

ci: create release script (#2142) [Daniel Vaz Gaspar]

Patch release 4.3.9

ci: create release script (#2142) [Daniel Vaz Gaspar]
fix: wtforms compat on 3.1.0 (#2138) [Daniel Vaz Gaspar]
docs: fix RTD config requirements (#2140) [Daniel Vaz Gaspar]
docs: fix RTD config (#2139) [Daniel Vaz Gaspar]
docs: add RTD required config (#2135) [Daniel Vaz Gaspar]

Open source →

4.3.9rc116 Oct 2023pre-release

Nothing published for this version

4.3.813 Oct 20233 sources agree

fix: filter list UI spacing between elements (#2128) [Daniel Vaz Gaspar]

Patch release 4.3.8

fix: filter list UI spacing between elements (#2128) [Daniel Vaz Gaspar]
fix: add github sponsor (#2130) [Daniel Vaz Gaspar]
docs: add github sponsor (#2129) [Daniel Vaz Gaspar]
fix: swagger include js and css on static (#2127) [Daniel Vaz Gaspar]
fix: Remove erroring endpoint "/login/<provider>/<register>" from AuthOAuthView (#2120) [David Kalamarides]
fix: azure user info claims and JWT decode (#2121) [Daniel Vaz Gaspar]
fix: Validate Azure JWTs using authlib (#2112) [Daniel Wolf]
docs(typo): "preform" -> "perform" x4 (#2123) [Sam Firke]

Open source →

4.3.8rc112 Oct 2023pre-release

Nothing published for this version

4.3.722 Sept 20233 sources agree

fix: swagger missing nonce (#2116) [Daniel Vaz Gaspar]

Patch release 4.3.7

fix: swagger missing nonce (#2116) [Daniel Vaz Gaspar]

Open source →

4.3.7rc122 Sept 2023pre-release

Nothing published for this version

4.3.622 Aug 20233 sources agree

fix: increase email field length (#2102) [Daniel Vaz Gaspar]

Patch release 4.3.6

fix: increase email field length (#2102) [Daniel Vaz Gaspar]

Open source →

4.3.6rc122 Aug 2023pre-release

Nothing published for this version

4.3.527 Jul 20233 sources agree

fix: release tests exclusion (#2093) [Daniel Vaz Gaspar]

Patch release 4.3.5

fix: release tests exclusion (#2093) [Daniel Vaz Gaspar]
fix: make deletion in quicktemplates example work again (#2088) [Fabian Halkivaha]
fix: MVC form action, broken reset my password (#2091) [Daniel Vaz Gaspar]
chore: dont add 'tests' package to wheel (#2087) [cwegener]
chore(deps): bump pygments from 2.13.0 to 2.15.0 (#2089) [dependabot[bot]]

Open source →

4.3.5rc227 Jul 2023pre-release

Nothing published for this version

4.3.5rc127 Jul 2023pre-release

Nothing published for this version

4.3.410 Jul 20233 sources agree

fix: select filters spacing, theme and operation select (#2079) [Daniel Vaz Gaspar]

Patch release 4.3.4

fix: select filters spacing, theme and operation select (#2079) [Daniel Vaz Gaspar]
refactor: Refactored logging functions to consistently use lazy interpolation (#2071) [Bruce]
feat: add optional flask-talisman and use csp nonce on scripts (#2075) [Daniel Vaz Gaspar]
chore: improve tests and test data load (#2072) [Daniel Vaz Gaspar]

Open source →

4.3.4rc110 Jul 2023pre-release

Nothing published for this version

4.3.321 Jun 20233 sources agree

fix: marshmallow enum by value keep compatibility (#2067) [Daniel Vaz Gaspar]

Patch release 4.3.3

fix: marshmallow enum by value keep compatibility (#2067) [Daniel Vaz Gaspar]
fix: marshmallow new min version to 3.18 (#2066) [Daniel Vaz Gaspar]
fix: select2-ajax-widget (#2052) [Nadir Can Kavkas]
chore: remove marshmallow-enum dependency (#2064) [Daniel Vaz Gaspar]
fix: Double escaping for next param in login with oauth (#2053) [Aleksandr Musorin]
chore: remove RemovedInMarshmallow4 warnings (#2024) [Sebastian Liebscher]
docs: Update docs/security.rst with Windows LDAP working Example (#2026) [verschlimmbesserer]
fix(translations): better translation of the pt_BR language (#2061) [Lucas Gonzalez de Queiroz]
fix: broken link to config.py template (#2056) [Alex Gordienko]
fix: user registration menu name (#2051) [Daniel Vaz Gaspar]

Open source →

4.3.3rc221 Jun 2023pre-release

Nothing published for this version

4.3.3rc120 Jun 2023pre-release

Nothing published for this version

4.3.222 May 2023Deprecated3 sources agree

fix: deprecated method for getting value on select2 (#2039) [Viacheslav]

Patch release 4.3.2

fix: CRUD MVC log message (#2045) [Daniel Vaz Gaspar]
fix: deprecated method for getting value on select2 (#2039) [Viacheslav]
chore: bump Flask and werkzeug (#2034) [Daniel Vaz Gaspar]
ci: improve codeql configuration (#2032) [Daniel Vaz Gaspar]
ci: add codeQL analysis (#2031) [Daniel Vaz Gaspar]
fix: cli create app ask for initial secret key (#2029) [Daniel Vaz Gaspar]
fix: using base_filters with FilterEqualFunction not working for relation fields (#2011) [ThomasP0815]
ci: bump ubuntu version, remove mockldap (#2013) [Daniel Vaz Gaspar]

Open source →

4.3.2rc222 May 2023pre-release

Nothing published for this version

4.3.2rc112 May 2023pre-release

Nothing published for this version

4.3.116 Mar 20233 sources agree

fix(mvc): operation filters with new select2 (#2005) [Daniel Vaz Gaspar]

Patch release 4.3.1

fix(mvc): operation filters with new select2 (#2005) [Daniel Vaz Gaspar]
fix(translations): misspell in ru translations (#2002) [Stepan]

Open source →

4.3.1rc116 Mar 2023pre-release

Nothing published for this version

4.3.023 Feb 20233 sources agree

fix: disable rate limit by default (#1999) [Daniel Vaz Gaspar]

Minor release 4.3.0

fix: disable rate limit by default (#1999) [Daniel Vaz Gaspar]
fix: auth rate limit docs and default rate (#1997) [Daniel Vaz Gaspar]
feat: Add rate limiter (#1976) [bolkedebruin]
docs: Updated LDAP Documentation (#1988) [Alissa Gerhard]
fix: Save next URL on failed login attempt (#1936) [Dosenpfand]
fix: select2 theme use bootstrap (#1995) [Daniel Vaz Gaspar]
fix: CI broken by pyodbc vs unixodbc (#1996) [Daniel Vaz Gaspar]

Open source →

4.3.0rc123 Feb 2023pre-release

Nothing published for this version

4.2.2rc123 Feb 2023pre-release

Nothing published for this version

4.2.117 Feb 20233 sources agree

ci: fix pyodbc install failure (#1992) [Daniel Vaz Gaspar]

Patch release 4.2.1

ci: fix pyodbc install failure (#1992) [Daniel Vaz Gaspar]
fix: Remove unused parameter from QuerySelectMultipleField instantiation (#1991) [Dosenpfand]
fix: Make sure user input is not treated as safe in the oauth view (#1978) [Glenn Schuurman]
fix: don't use root logger on safe decorator (#1990) [Igor Khrol]
chore: upgrade Font Awesome to version 6 (#1979) [Daniel Vaz Gaspar]

Open source →

4.2.1rc116 Feb 2023pre-release

Nothing published for this version

4.2.03 Jan 2023Deprecated3 sources agree

fix: replace deprecated attachment_filename (#1956) [Steve Embling]

Minor release 4.1.6

feat: add opt-in outer default load option to model REST API (#1971) [Daniel Vaz Gaspar]
chore: Add more type annotation to REST API module (#1969) [Daniel Vaz Gaspar]
fix: upgrade Select2 to 4.0.13 (#1968) [Nicola Gramola]
fix: REST API one-to-one relationship (#1965) [Daniel Vaz Gaspar]
fix(api): _info HTTP 500 when exists a defined invalid search field (#1963) [Daniel Vaz Gaspar]
chore: Use implicit default loading rather than explicit joined eager loading (#1961) [John Bodley]
chore: Increase upper-bound on apispec (#1903) [Tomáš Drtina]
fix: replace deprecated attachment_filename (#1956) [Steve Embling]

Open source →

4.2.0rc122 Dec 2022pre-release

Nothing published for this version

4.1.7rc122 Dec 2022pre-release

Nothing published for this version

4.1.610 Nov 20223 sources agree

feat: add utility method on SM for fetching all roles and perms for a user (#1950) [Daniel Vaz Gaspar]

Patch release 4.1.6

feat: add utility method on SM for fetching all roles and perms for a user (#1950) [Daniel Vaz Gaspar]

Open source →

4.1.6rc19 Nov 2022pre-release

Nothing published for this version

4.1.531 Oct 20223 sources agree

fix: HTML label IDs for db and ldap login (#1935) [Dosenpfand]

Patch release 4.1.5

fix: HTML label IDs for db and ldap login (#1935) [Dosenpfand]
fix: OAuth state parameter (#1932) [Daniel Vaz Gaspar]
docs: Fix a few typos (#1929) [Tim Gates]
chore: Update compiled german translation, delete backup file (#1928) [Dosenpfand]
fix: addon managers import (#1920) [Daniel Vaz Gaspar]

Open source →

4.1.5rc128 Oct 2022pre-release

Nothing published for this version

4.1.45 Sept 20223 sources agree

chore: Redirect to prev url on login for AuthRemoteUserView (#1901) [Alexander Ryndin]

Patch release 4.1.4

chore: Redirect to prev url on login for AuthRemoteUserView (#1901) [Alexander Ryndin]
chore: Bump upper bounds on wtforms and flask-wtf (#1904) [Tomáš Drtina]
fix(mvc): related model view setting default related field value (#1898) [Daniel Vaz Gaspar]
fix: DateTimePicker rendering in forms (#1698) [Federico Padua]
test(fab_cli): tag tests that need internet so they can be skipped (#1880) [jnahmias]
fix: fix a wrong 'next' URL in javascript (#1897) [Sansarun Sukawongviwat]
chore: allow authlib > 1 updated docs (#1891) [Daniel Vaz Gaspar]
docs: fix oauth example config (#1890) [Daniel Vaz Gaspar]
docs: fix oauth example config (#1889) [Daniel Vaz Gaspar]

Open source →

4.1.4rc15 Sept 2022pre-release

Nothing published for this version

4.1.36 Jul 20223 sources agree

fix: user stats view search (#1887) [Daniel Vaz Gaspar]

Patch release 4.1.3

fix: user stats view search (#1887) [Daniel Vaz Gaspar]
fix: Do not render hidden form fields twice (#1848) [Dosenpfand]
chore: Bump requirements pillow version, remove PIL from doc (#1873) [Dosenpfand]
fix: custom menu option (#1884) [Daniel Vaz Gaspar]
fix: FAB_INDEX_VIEW type check (#1883) [Daniel Vaz Gaspar]
fix(api): register responses with apispec using components.response() (#1881) [jnahmias]
docs: add responsible disclosure text to security (#1882) [Daniel Vaz Gaspar]
chore: Improve german translation (#1872) [Dosenpfand]
fix: populating permission and vm instead of just setting the id (#1874) [Zef Lin]

Open source →

4.1.3rc15 Jul 2022pre-release

Nothing published for this version

4.1.223 Jun 20223 sources agree

fix: remove sqlite dbs from examples (#1853) [Daniel Vaz Gaspar]

Patch release 4.1.2

fix: remove sqlite dbs from examples (#1853) [Daniel Vaz Gaspar]
fix(MVC): discard excluded filters from query (#1862) [Daniel Vaz Gaspar]

Open source →

4.1.2rc122 Jun 2022pre-release

Nothing published for this version

4.1.125 May 20223 sources agree

fix: custom security class import, bad cast (#1851) [Daniel Vaz Gaspar]

Patch release 4.1.1

fix: custom security class import, bad cast (#1851) [Daniel Vaz Gaspar]
fix: Set certificates before reconnecting to LDAP (#1846) [Sebastian Bernauer]

Open source →

4.1.1rc124 May 2022pre-release

Nothing published for this version

4.1.03 May 20223 sources agree

docs: add FAB_ADD_SECURITY_API config option (#1840) [Daniel Vaz Gaspar]

Minor release 4.1.0

docs: add FAB_ADD_SECURITY_API config option (#1840) [Daniel Vaz Gaspar]
feat: add keycloak auth provider options (#1832) [nilivingston]
docs: add Azure OAUTH example (#1837) [Mathew Wicks]
fix: security api (#1831) [Daniel Vaz Gaspar]
fix: dependency constraints, bump flask-login, flask-wtf (#1838) [Daniel Vaz Gaspar]
fix: noop user update on Auth db, use set user model (#1834) [Daniel Vaz Gaspar]
chore: bump postgres to 14 (#1833) [Daniel Vaz Gaspar]
chore: Update and fix german translation (#1827) [Dosenpfand]
chore: Enhance is_safe_redirect_url (#1826) [Geido]
feat: Add CRUD apis for role, permission, user (#1801) [Mayur]
docs: updated brackets in OAuth Authentication (#1798) [David Berg]
chore: add Slovenian language (#1828) [dkrat7]
fix: doc requirements (#1820) [Daniel Vaz Gaspar]

Open source →

4.0.1rc12 May 2022pre-release

Nothing published for this version

Your coding agent can read these notes before it upgrades. Set up the MCP server →