Skip to content
OpenAdvisories

Package · PyPI

gramps-webapi

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    GHSA-9gjv-jvm7-vv2v

    Gramps Web API: Private Sub-Object Data in Non-Private Objects Exposed to Guest Users

    ## Summary Users with the **Guest** role could receive private sub-object data (e.g. private alternate names, private addresses, private note/citation/media handles) through list API endpoints such as `GET /api/people/`, `GET /api/places/`, `GET /api/events/`…

    gramps-webapi PyPI