Skip to content
OpenAdvisories

Package · npm

umami

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.6
    GHSA-8www-cffh-4q98

    Anyone with a share link can RESET all website data in Umami

    ### Summary Anyone with a share link (permissions to view) can reset the website data. ### Details When a user navigates to a `/share/` URL, he receives a share token which is used for authentication. This token is later verified by `useAuth`. After the token…

    umami npm