No security policy detected

This project has not set up aSECURITY.md file yet.

• XSS In watch overview, failure to fully filter error texts generated by website page change filters

  GHSA-hwpg-x5hw-vpv9 publishedJun 21, 2025 bydgtlmoon

  High
• Improper Input Validation Leading to LFR/Path Traversal

  GHSA-j5vv-6wjg-cfr8 publishedDec 27, 2024 bydgtlmoon

  High
• Path traversal using file URI scheme without supplying hostname

  GHSA-6jrf-rcjf-245r publishedNov 7, 2024 bydgtlmoon

  High
• Path Traversal

  GHSA-cwgg-57xj-g77r publishedOct 31, 2024 bydgtlmoon

  Moderate
• XSS reflected (Post Base) in /settings

  GHSA-pwgc-w4x9-gw67 publishedMay 2, 2024 bydgtlmoon

  Moderate
• Server Side Template Injection in Jinja2 allows Remote Command Execution

  GHSA-4r7v-whpg-8rx3 publishedApr 25, 2024 bydgtlmoon

  Critical
• API endpoint `/api/v1/watch/<uuid>/history` is not secured with API token

  GHSA-hcvp-2cc7-jrwr publishedJan 19, 2024 bydgtlmoon

  Low