| Package | Affected versions | Patched versions |
|---|---|---|
| globaleaks | < 5.0.89 | 5.0.89 |
GlobaLeaks is free and open-source whistleblowing software. Prior to version 5.0.89, the /api/support endpoint of GlobaLeaks performs minimal validation on user-submitted support requests. As a result, arbitrary URLs can be included in support emails sent to administrators. Version 5.0.89 patches the issue.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free