Bookwyrm-social vulnerabilities
We track 2 vulnerabilities in Bookwyrm-social products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 2, 2022.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest Bookwyrm-social vulnerabilities
- 9.8 Critical severity
bookwyrm: Improper Restriction of Excessive Authentication Attempts
BookWyrm is a social network for tracking reading. Versions prior to 0.4.5 were found to lack rate limiting on authentication views which allows brute-force attacks. This issue has been patched in version 0.4.5. Admins with existing instances will need to upda
- 8.8 High severity
bookwyrm: Server-Side Request Forgery
BookWyrm is a decentralized social network for tracking reading habits and reviewing books. The functionality to load a cover via url is vulnerable to a server-side request forgery attack. Any BookWyrm instance running a version prior to v0.3.0 is susceptible