~ / search / GHSA-w65c-cmxj-qrhm

GHSA-w65c-cmxj-qrhm

Wooey has an Incorrect Privilege Assignment issue

Source: GitHub Advisory Database (reviewed) Low CVE-2026-7142

Packages

EcosystemPackageAffectedFixed in
PyPI wooey < 0.13.3rc1 0.13.3rc1

Details

As written in the advisory (Markdown source, shown as plain text).

A vulnerability was determined in Wooey up to 0.13.2. The impacted element is the function add_or_update_script of the file wooey/api/scripts.py of the component API Endpoint. Executing a manipulation can lead to improper authorization. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 0.13.3rc1 and 0.14.0 is sufficient to resolve this issue. This patch is called f7846fc0c323da8325422cab32623491757f1b88. The affected component should be upgraded.

References

External links from the advisory. They lead to third-party sites.