https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T15:53:35.451753+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-194986 EUVD-2026-194986 2026-10-16T15:53:35.536521+00:00 EUVD-2026-194986 https://cve.radiocsirt.org/vuln/fkie_cve-2023-38759 fkie_cve-2023-38759 2026-10-16T15:53:35.536565+00:00

Cross Site Request Forgery (CSRF) vulnerability in wger Project wger Workout Manager 2.2.0a3 allows a remote attacker to gain privileges via the user-management feature in the gym/views/gym.py, templates/gym/reset_user_password.html, templates/user/overview.html, core/views/user.py, and templates/user/preferences.html, core/forms.py components.

 https://cve.radiocsirt.org/vuln/ghsa-wrw3-qmqw-4x9w GHSA-wrw3-qmqw-4x9w — wger Workout Manager Cross-Site Request Forgery vulnerability 2026-10-16T15:53:35.536600+00:00

Affected: PyPI: wger

Cross Site Request Forgery (CSRF) vulnerability in wger Project wger Workout Manager 2.2.0a3 allows a remote attacker to gain privileges via the `user-management` feature in the `gym/views/gym.py`, `templates/gym/reset_user_password.html`, `templates/user/overview.html`, `core/views/user.py`, and `templates/user/preferences.html`, `core/forms.py` components.

 https://cve.radiocsirt.org/vuln/gsd-2023-38759 gsd-2023-38759 2026-10-16T15:53:35.536634+00:00 gsd-2023-38759 https://cve.radiocsirt.org/vuln/pysec-2023-144 PYSEC-2023-144 2026-10-16T15:53:35.536647+00:00

Affected: PyPI: wger

Cross Site Request Forgery (CSRF) vulnerability in wger Project wger Workout Manager 2.2.0a3 allows a remote attacker to gain privileges via the user-management feature in the gym/views/gym.py, templates/gym/reset_user_password.html, templates/user/overview.html, core/views/user.py, and templates/user/preferences.html, core/forms.py components.