| Package | Affected versions | Patched versions |
|---|---|---|
| tolgee | ≥ 3.57.2, < 3.57.4 | 3.57.4 |
Tolgee is an open-source localization platform. When API key created by admin user is used it bypasses the permission check at all. This error was introduced in v3.57.2 and immediately fixed in v3.57.4.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free