Skip to content

wger: IDOR via user-unscoped cache keys on routine API actions exposes workout data

Low severity GitHub Reviewed Published Feb 26, 2026 in wger-project/wger • Updated Feb 27, 2026

No closed alerts for this advisory

Give feedback on Dependabot alerts