Repository navigation
Security: krateng/maloja
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
Stored XSS via unescaped scrobble metadataGHSA-9vw8-rf55-xvr8 published
Oct 9, 2026 by kratengModerate -
SSRF via Unvalidated Image Download — No Internal IP Filtering in dl_image()GHSA-h9q5-c59c-3hf5 published
Aug 13, 2026 by kratengModerate -
Authentication Replay Attack — Captured Handshake Tokens Never ExpireGHSA-69c3-86q8-w5wj published
Aug 13, 2026 by kratengHigh -
Error page XSS vulnerabilityGHSA-4h72-34j6-j8x7 published
Dec 17, 2023 by kratengModerate
Learn more about advisories related to krateng/maloja in the GitHub Advisory Database