Please report security issues using the Security Advisories of GitHub.
Security: wallabag/wallabag
Security
SECURITY.md
-
Multiple Cross-Site Request Forgery (CSRF) Vulnerabilities in wallabag/wallabagGHSA-5pm7-cp8f-p2c2 published
Apr 8, 2025 by KdecherfModerate -
A user can disable her 2FA unintentionallyGHSA-56fm-hfp3-x3w3 published
Oct 2, 2023 by j0k3rModerate -
A user can reset its data unintentionallyGHSA-p8gp-899c-jvq9 published
Aug 21, 2023 by nicosombModerate -
A user can delete its own API client unintentionallyGHSA-gjvc-55fw-v6vq published
Aug 21, 2023 by nicosombModerate -
A user can modify or delete other users' annotationsGHSA-mrqx-mjc4-vfh3 published
Feb 1, 2023 by j0k3rModerate -
A user can export other users' entriesGHSA-qwx8-mxxx-mg96 published
Feb 1, 2023 by j0k3rModerate
Learn more about advisories related to wallabag/wallabag in the GitHub Advisory Database