CVE-2026-40258
2 advisories.
PyPI/gramps-webapi CVE-2026-40258: critical 9.1
gramps-webapi: Zip Slip Path Traversal in Media Archive Import
Action: Upgrade gramps-webapi to 3.11.1 or later.
pip install gramps-webapi==3.11.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.6.0 | 3.11.1 | - |
Fixed versions
| 3.11.1 |
Sources
- osv: GHSA-m5gr-86j6-99jp
- https://github.com/gramps-project/gramps-web-api/security/advisories/GHSA-m5gr-86j6-99jp
- https://nvd.nist.gov/vuln/detail/CVE-2026-40258
- https://github.com/gramps-project/gramps-web-api/commit/3ed4342711e3ec849552df09b1fe2fbf2ca5c29a
- https://github.com/gramps-project/gramps-web-api
- https://github.com/gramps-project/gramps-web-api/releases/tag/v3.11.1
CVE-2026-40258 · published · modified · JSON
PyPI/gramps-webapi CVE-2026-40258: critical 9.1
gramps-webapi: Zip Slip Path Traversal in Media Archive Import
Action: Upgrade gramps-webapi to 3.11.1 or later.
pip install gramps-webapi==3.11.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.6.0 | 3.11.1 | - |
Fixed versions
| 3.11.1 |
Sources
- osv: PYSEC-2026-346
- https://github.com/gramps-project/gramps-web-api/security/advisories/GHSA-m5gr-86j6-99jp
- https://nvd.nist.gov/vuln/detail/CVE-2026-40258
- https://github.com/gramps-project/gramps-web-api/commit/3ed4342711e3ec849552df09b1fe2fbf2ca5c29a
- https://github.com/gramps-project/gramps-web-api
- https://github.com/gramps-project/gramps-web-api/releases/tag/v3.11.1
- https://pypi.org/project/gramps-webapi
- https://github.com/advisories/GHSA-m5gr-86j6-99jp
CVE-2026-40258 · published · modified · JSON