Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-60535
7.3
HIGHCVSS v3
Published
October 14, 2025
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
A Cross-Site Request Forgery (CSRF) in the component /endpoints/currency/currency of Wallos v4.1.1 allows attackers to execute arbitrary operations via a crafted GET request.
ellite/Wallos
GitHubWallos: Open-source, self-hostable personal subscription tracker. Visualize your recurring expenses, manage your budget, and save money.
GitHubWallos: Open-source, self-hostable personal subscription tracker. Visualize your recurring expenses, manage your budget, and save money.NVD