VulertSecurity VulertSecurity

Vulnerability Database · Packagist · wallabag/wallabag · Version

wallabag/wallabag 2.2.0

2.2.0 is affected by 15 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to.

Critical 0 High 0 Medium 15 Low 0 Unrated 0

All wallabag/wallabag versions & vulnerabilities → Search the database for this package →
Database updated 23/Oct/2026

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

wallabag/wallabag 2.2.0 vulnerabilities

15 vulnerabilities cover wallabag/wallabag 2.2.0. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
CVE-2023-0737: wallabag Account Deletion via CSRF Vulnerability 6.5 medium 2.5.4 15 Nov 2024
CVE-2023-4455: Wallabag Arbitrary API Key Deletion 6.5 medium 2.6.3 21 Aug 2023
Duplicate Advisory: Wallabag user can delete own API client unintentionally 6.5 medium 2.6.3 21 Aug 2023
CVE-2023-3566: Wallabag 2.5.4 - Allocation of Resources Without Limits or Throttling 6.5 medium No fix published 10 Jul 2023
CVE-2023-0735: Cross-Site Request Forgery (CSRF) in wallabag/wallabag 6.5 medium 2.5.4 08 Feb 2023
CVE-2023-0609: Improper Authorization in wallabag 6.5 medium 2.5.3 02 Feb 2023
CVE-2023-4454: Wallabag Arbitrary Data Reset Vulnerability 5.7 medium 2.6.3 21 Aug 2023
CVE-2023-0736: Cross-site Scripting (XSS) in wallabag/wallabag 5.4 medium 2.5.4 08 Feb 2023
CVE-2023-0610: Improper Authorization in wallabag 5.4 medium 2.5.3 02 Feb 2023
CVE-2023-0734: Wallabag Improper Authorization Vulnerability 5.3 medium 2.5.4 05 Mar 2023
Multiple CSRF Vulnerabilities in wallabag/wallabag Affecting User Security 4.3 medium 2.6.11 09 Apr 2025
Wallabag User Can Disable 2FA Unintentionally 4.3 medium 2.6.7 02 Oct 2023
Duplicate Advisory: Wallabag user can reset data unintentionally 4.3 medium 2.6.3 21 Aug 2023
Improper Authorization in wallabag/wallabag 4.3 medium 2.5.3 01 Feb 2023
Improper Authorization in wallabag/wallabag 4.3 medium 2.5.3 01 Feb 2023

Looking for another version, or everything Vulert holds for wallabag/wallabag?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About wallabag/wallabag 2.2.0

Is wallabag/wallabag 2.2.0 vulnerable?

Yes. 15 vulnerabilities in the Vulert database cover wallabag/wallabag 2.2.0: 0 critical, 0 high, 15 medium and 0 low. Each entry above names the fixed version to move to.

How do I monitor wallabag/wallabag for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the wallabag/wallabag version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.