gramps-webapi vulnerabilities (PyPI)

2 vulnerabilities.

• gramps-webapi PyPI Gramps Web API has Zip Slip Path Traversal in Media Archive Import CVE-2026-40258 Fix available 9.1 CriticalApril 10, 2026
• gramps-webapi PyPI Gramps Web API: Private Sub-Object Data in Non-Private Objects Exposed to Guest Users GHSA-9gjv-jvm7-vv2v Fix available 6.9 MediumApril 9, 2026