Galette vulnerabilities
We track 3 vulnerabilities in Galette products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on December 19, 2025.
Latest Galette vulnerabilities
- 9.8 Critical severity
galette: Improper Privilege Management
Galette is a membership management web application for non profit organizations. Prior to version 1.2.0, while updating any existing account with a self forged POST request, one can gain higher privileges. Version 1.2.0 fixes the issue.
- 8.1 High severity
galette: Incorrect Authorization
Galette is a membership management web application for non profit organizations. Starting in version 0.9.6 and prior to version 1.2.0, attackers with group manager role can bypass intended restrictions allowing unauthorized access and changes despite role-base
- 7.5 High severity
galette: Incorrect Authorization
Galette is a membership management web application for non profit organizations. Starting in version 1.0.0 and prior to version 1.0.2, public pages are per default restricted to only administrators and staff members. From configuration, it is possible to restr