Skip to content
OpenAdvisories

Vendor

wger-project

19 known vulnerabilities.

Products

wger 18 wger-project/wger 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.9
    CVE-2026-43948

    wger: cross-tenant password reset and plaintext disclosure via gym=None bypass

    wger is a free, open-source workout and fitness manager. Prior to 2.6, the reset_user_password and gym_permissions_user_edit views in wger perform a gym-scope authorization check using Python object comparison (!=) that evaluates None != None as False, silent…

    wger-project wger wger PyPI