Skip to content
OpenAdvisories

Product · cyberjunky

python-garminconnect

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.4
    CVE-2026-54447

    garminconnect: Insecure Permission Assignment for Garmin OAuth Token Store

    garminconnect is a Python 3 API wrapper for Garmin Connect that retrieves statistics and manages activities. Prior to 0.3.5, garminconnect/client.py Client.dump creates the OAuth token directory and garmin_tokens.json without explicit owner-only modes, so a p…

    cyberjunky python-garminconnect garminconnect PyPI