galette has 3 CVEs on record. The busiest recent month was December 2025 with 3. The median CVSS is 8.1 (high), with 1 rated critical.
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 8.1
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Worst active — by depth score
CVE-2025-58053Critical· 9.8Galette is a membership management web application for non profit organizations54CVE-2025-58052High· 8.1Galette is a membership management web application for non profit organizations45CVE-2025-53922Medium· 4.9Galette is a membership management web application for non profit organizations27
galette vulnerabilities
CVEs affecting galette, newest first. Open any entry for full detail, references, and exploit status.
3 CVEsRSS
CVE-2025-58053Critical· 9.8Galette is a membership management web application for non profit organizations
Galette is a membership management web application for non profit organizations. Prior to version 1.2.0, while updating any existing account with a self forged POST request, one can gain higher privileges. Version 1.2.0 fixes the issue.
CVE-2025-58052High· 8.1Galette is a membership management web application for non profit organizations
Galette is a membership management web application for non profit organizations. Starting in version 0.9.6 and prior to version 1.2.0, attackers with group manager role can bypass intended restrictions allowing unauthorized access and ch…
CVE-2025-53922Medium· 4.9Galette is a membership management web application for non profit organizations
Galette is a membership management web application for non profit organizations. Starting in version 1.1.4 and prior to version 1.2.0, a user who is logged in as group manager may bypass intended restrictions on Contributions and Transac…