Skip to content
OpenAdvisories

Vendor

globaleaks

1 known vulnerabilities.

Products

globaleaks-whistleblowing-software 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 1.2
    CVE-2026-33284

    GlobalLeaks has insufficient URL validation in user support API

    GlobaLeaks is free and open-source whistleblowing software. Prior to version 5.0.89, the /api/support endpoint of GlobaLeaks performs minimal validation on user-submitted support requests. As a result, arbitrary URLs can be included in support emails sent to …

    globaleaks globaleaks-whistleblowing-software