Joinbookwyrm Bookwyrm
5 CVEs affecting Joinbookwyrm Bookwyrm. Latest disclosed: 2022-08-12. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-2651 | Critical | 9.8 | 2022-08-04 | Authentication Bypass by Primary Weakness in GitHub repository bookwyrm-social/bookwyrm prior to 0.4.5. |
CVE-2022-23644 | High | 8.8 | 2022-02-16 | BookWyrm is a decentralized social network for tracking reading habits and reviewing books. The functionality to load a cover via url is vulnerable to a server… |
CVE-2022-35953 | High | 7.1 | 2022-08-12 | BookWyrm is a social network for tracking your reading, talking about books, writing reviews, and discovering what to read next. Some links in BookWyrm may be… |
CVE-2022-31136 | Medium | 6.3 | 2022-07-07 | Bookwyrm is an open source social reading and reviewing program. Versions of Bookwyrm prior to 0.4.1 did not properly sanitize html being rendered to users. Un… |
CVE-2022-35925 | Medium | 5.3 | 2022-08-02 | BookWyrm is a social network for tracking reading. Versions prior to 0.4.5 were found to lack rate limiting on authentication views which allows brute-force at… |