Gramps-project vulnerabilities
We track 1 vulnerability in Gramps-project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 17, 2026.
1vulnerabilities
1critical
0high
0exploited
9.1average CVSS score
Latest Gramps-project vulnerabilities
- 9.1 Critical severity
gramps-web-api: Improper Limitation of a Pathname to a Restricted Directory
The Gramps Web API is a Python REST API for the genealogical research software Gramps. Versions 1.6.0 through 3.11.0 have a path traversal vulnerability (Zip Slip) in the media archive import feature. An authenticated user with owner-level privileges can craft