The latest version will be supported with security updates.
You can report a security vulnerability privately on Github.
Security: xenocrat/chyrp-lite
Security
SECURITY.md
-
Unescaped GET parameters can be used to trick user to visit a malicious website.GHSA-h7h4-mj4g-gvc4 published
Jan 12, 2025 by xenocratLow -
Files accessible for public browsingGHSA-5qxv-jf28-5pv8 published
Jan 12, 2025 by xenocratLow -
CSRF vulnerability in authenticate() helper functionGHSA-fx8w-76gh-h2w9 published
Jan 15, 2024 by xenocratHigh -
Potential SSRF in the helper function get_remote()GHSA-r5pc-fqvv-8mc6 published
Nov 15, 2023 by xenocratLow
Learn more about advisories related to xenocrat/chyrp-lite in the GitHub Advisory Database