Skip to content
OpenAdvisories

Package · PyPI

gramps-webapi

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.1
    CVE-2026-40258

    Gramps Web API has Zip Slip Path Traversal in Media Archive Import

    The Gramps Web API is a Python REST API for the genealogical research software Gramps. Versions 1.6.0 through 3.11.0 have a path traversal vulnerability (Zip Slip) in the media archive import feature. An authenticated user with owner-level privileges can craf…

    gramps-project gramps-web-api gramps-webapi PyPI
  • Medium —
    GHSA-9gjv-jvm7-vv2v

    Gramps Web API: Private Sub-Object Data in Non-Private Objects Exposed to Guest Users

    ## Summary Users with the **Guest** role could receive private sub-object data (e.g. private alternate names, private addresses, private note/citation/media handles) through list API endpoints such as `GET /api/people/`, `GET /api/places/`, `GET /api/events/`…

    gramps-webapi PyPI