Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-30828
7.5
HIGHCVSS v3
Published
March 7, 2026
Affected
2 projects
Assigned by
GitHub
Severity scale
010
Description
Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.6.2, the url parameter can be used to retrieve local system files. This issue has been patched in version 4.6.2.
ellite/Wallos
GitHubWallos: Open-source, self-hostable personal subscription tracker. Visualize your recurring expenses, manage your budget, and save money.
GitHubWallos: Open-source, self-hostable personal subscription tracker. Visualize your recurring expenses, manage your budget, and save money.< 4.6.2NVD
Docker Hub