python-garminconnect vulnerabilities
1 known vulnerability in python-garminconnect from Cyberjunky. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.4average CVSS score
Latest first
- 8.4 High severity
python-garminconnect: Incorrect Permission Assignment for Critical Resource
garminconnect is a Python 3 API wrapper for Garmin Connect that retrieves statistics and manages activities. Prior to 0.3.5, garminconnect/client.py Client.dump creates the OAuth token directory and garmin_tokens.json without explicit owner-only modes, so a pe