GYM-One vulnerabilities
CVEs whose affected-version data names the GYM-One package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-55872High· 8.7GYM One is open-source gym management software for fitness centers, personal trainers, and sports clubs
GYM One is open-source gym management software for fitness centers, personal trainers, and sports clubs. Prior to 1.4.1, GYM One's admin/users/index.php renders the stored firstname, lastname, and email profile fields into the administra…
▾ Twilightmayerbalintdev · GYM-Onevia NVD
CVE-2026-55871Medium· 6.5PoCGYM One is open-source gym management software for fitness centers, personal trainers, and sports clubs
GYM One is open-source gym management software for fitness centers, personal trainers, and sports clubs. Prior to 1.4.1, GYM One's admin/users/index.php concatenates the search_name and search_email GET parameters into both the user-list…
▾ Twilightmayerbalintdev · GYM-Onevia NVD