CVE-2021-41262

Name of the Vulnerable Software and Affected Versions Galette versions prior to 0.9.6

Description Galette is a membership management web application built for non-profit organizations and released under GPLv3. The issue allows SQL injection attacks by users with member privilege. There are no known workarounds.

Recommendations For versions prior to 0.9.6, upgrade to version 0.9.6 as soon as possible to resolve the issue. As a temporary workaround, consider restricting the member privilege to minimize the risk of exploitation.