PyPI/wger CVE-2026-86256: medium 5.4, EPSS 0.23%
wger: trainer_login open redirect - ?next= parameter not validated against host
Action: Upgrade wger to 2.6 or later.
pip install wger==2.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.6 | - |
Fixed versions
| 2.6 |
Sources
- osv: GHSA-vqv8-j3mj-wjxj
- https://github.com/wger-project/wger/security/advisories/GHSA-vqv8-j3mj-wjxj
- https://github.com/wger-project/wger
CVE-2026-86256 · published · modified · JSON