Wallabag vulnerabilities

Products

• Wallabag 12
• Wallabag/wallabag 8

Newest

• wallabag wallabag 2.6.13 through 2.6.14 Stored XSS via Failed HTML Import Upload CVE-2026-110228 5.1 MediumOctober 13, 2026
• wallabag android-app The wallabag (aka fr.gaulupeau.apps.InThePoche) application through 2.6.0 for Android allows XSS... CVE-2026-82089 8.8 HighAugust 28, 2026
• wallabag wallabag 2 through 2.6.14 allows SSRF because a crafted title or content field is mishandled... CVE-2026-82081 6.4 MediumAugust 28, 2026
• wallabag, wallabag wallabag/wallabag +1 more CSRF in wallabag/wallabag CVE-2023-0737 Fix available 6.5 MediumNovember 15, 2024
• wallabag, wallabag wallabag/wallabag +1 more Cross-Site Request Forgery (CSRF) in wallabag/wallabag CVE-2023-4455 Fix available 6.5 MediumAugust 21, 2023
• wallabag, wallabag wallabag/wallabag +1 more Cross-Site Request Forgery (CSRF) in wallabag/wallabag CVE-2023-4454 Fix available 4.3 MediumAugust 21, 2023
• wallabag wallabag Profile Config config allocation of resources CVE-2023-3566 3.5 LowJuly 8, 2023
• wallabag, wallabag wallabag/wallabag +1 more Improper Authorization in wallabag/wallabag CVE-2023-0734 Fix available 7.3 HighMarch 5, 2023
• wallabag, wallabag wallabag/wallabag +1 more Cross-site Scripting (XSS) - Stored in wallabag/wallabag CVE-2023-0736 Fix available 4.6 MediumFebruary 7, 2023
• wallabag, wallabag wallabag/wallabag +1 more Cross-Site Request Forgery (CSRF) in wallabag/wallabag CVE-2023-0735 Fix available 6.5 MediumFebruary 7, 2023
• wallabag, wallabag wallabag/wallabag +1 more Improper Authorization in wallabag/wallabag CVE-2023-0610 Fix available 5.4 MediumFebruary 1, 2023
• wallabag, wallabag wallabag/wallabag +1 more Improper Authorization in wallabag/wallabag CVE-2023-0609 Fix available 6.5 MediumFebruary 1, 2023
• wallabag Wallabag cross-site scripting (XSS) vulnerability CVE-2018-11352 Fix available 4.0 MediumSeptember 21, 2018