Loading HuntDB...

GHSA-mwxw-hxvp-4r2r

GitHub Security Advisory

Firefly III vulnerable to improper input validation

✓ GitHub Reviewed MODERATE Has CVE

Advisory Details

Firefly III versions prior to 6.0.0 are vulnerable to improper input validation.

Affected Packages

Packagist grumpydictator/firefly-iii
Affected versions: 0 (fixed in 6.0.0)

Related CVEs

Key Information

GHSA ID
GHSA-mwxw-hxvp-4r2r
Published
April 1, 2023 3:30 AM
Last Modified
April 7, 2023 10:50 PM
CVSS Score
5.0 /10
Primary Ecosystem
Packagist
Primary Package
grumpydictator/firefly-iii
GitHub Reviewed
✓ Yes

Dataset

Last updated: July 12, 2025 6:29 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.