Skip to content
OpenAdvisories

Product · gramps-project

gramps-web-api

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-40258

    Gramps Web API has Zip Slip Path Traversal in Media Archive Import

    The Gramps Web API is a Python REST API for the genealogical research software Gramps. Versions 1.6.0 through 3.11.0 have a path traversal vulnerability (Zip Slip) in the media archive import feature. An authenticated user with owner-level privileges can craf…

    gramps-project gramps-web-api gramps-webapi PyPI