Packagist/wallabag/wallabag: medium 4.3
Wallabag user can disable 2FA unintentionally
Action: Upgrade wallabag/wallabag to 2.6.7 or later.
composer require wallabag/wallabag:2.6.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0-alpha.1 | 2.6.7 | - |
Fixed versions
| 2.6.7 |
Sources
- osv: GHSA-56fm-hfp3-x3w3
- https://github.com/wallabag/wallabag/security/advisories/GHSA-56fm-hfp3-x3w3
- https://github.com/wallabag/wallabag/commit/0cfdddc2eb0aee5ffb69bf499d377d75655ba157
- https://github.com/wallabag/wallabag
- https://huntr.dev/bounties/4c446fe7-2a44-4907-b0cf-4ab77d75c487
published · modified · JSON