Packagist/wallabag/wallabag: medium 4.3

wallabag/wallabag Has Multiple Cross-Site Request Forgery (CSRF) Vulnerabilities

Action: Upgrade wallabag/wallabag to 2.6.11 or later.

composer require wallabag/wallabag:2.6.11

Affected

Fixed versions

Sources

• osv: GHSA-5pm7-cp8f-p2c2
• https://github.com/wallabag/wallabag/security/advisories/GHSA-5pm7-cp8f-p2c2
• https://github.com/wallabag/wallabag/commit/edffef837598355c9bec433c469f1e04c35b27cb
• https://github.com/wallabag/wallabag/commit/ed1acf59e166a2a6bb81c52baaeabd6196feae98
• https://github.com/wallabag/wallabag/commit/eb8408b22fbaa6b3d78047d6203b23b7f52bbf03
• https://github.com/wallabag/wallabag/commit/e162408139ac9bb12e69f4d49de45ade49369c21
• https://github.com/wallabag/wallabag/commit/ddf2e808422e41ea55cebf2aa12eb1823c5c340a
• https://github.com/wallabag/wallabag/commit/d703fa6a3a75f7c3b433e8caf618bfb0a9a0ba63
• https://github.com/wallabag/wallabag/commit/d1e128900acc0cb8c88eb7a085c9ef5420cf0c43
• https://github.com/wallabag/wallabag/commit/cf49be694089667bbab9f10d52862fbdba9a89de
• https://github.com/wallabag/wallabag/commit/ac5b5fb379233d6e96ea14ae21b7f88761d5fa3f
• https://github.com/wallabag/wallabag/commit/99c8a06594d6ee7480ce4d041ccff3025b353656
• https://github.com/wallabag/wallabag/commit/6fa61c0f9c48d37625c92a8913b487230761fb47
• https://github.com/wallabag/wallabag/commit/677b2986bc78df4c7ecfed87a24593fa0553fd3c
• https://github.com/wallabag/wallabag/commit/5ea5115a721651f2af349e8451be8947dad9c814
• https://github.com/wallabag/wallabag/commit/3817010e29ed368df271cdd11ec71a46a341c673
• https://github.com/wallabag/wallabag/commit/27f0d94db72fb2a54b5965e4e9908a0f418f44b5
• https://github.com/wallabag/wallabag/commit/264f91126e2c42188b80848c881264da743b4dc1
• https://github.com/wallabag/wallabag/commit/0d8429dfc77b84f50060b253fd84f1c09b892226
• https://github.com/wallabag/wallabag/commit/00d0e6f951927434039465b4d3ae3dd661911172
• https://github.com/wallabag/wallabag

published 2025-04-09T13:09:26Z · modified 2025-04-09T13:27:38.527902Z · JSON