Homepage

wger vulnerabilities

FLOSS workout, fitness and weight manager/tracker written with Django
Licenses: AGPL-3.0
Published: 13 years ago Last updated: 3 years ago Latest version: 2.1
pip
GitHub

Package Health Score

33/100
  • securitySecurity issues found
  • popularitySmall
  • maintenanceInactive
  • communitySustainable

Maintenance

INACTIVE

Commit Frequency

Loading chart...

Open Issues
221
Open PR
20
New PRS
1
Last Release
3 years ago
Last Commit
3 days ago
Maintainers
1

Further analysis of the maintenance status of wger based on released PyPI versions cadence, the repository activity, and other data points determined that its maintenance is Inactive.

An important project maintenance signal to consider for wger is that it hasn't seen any new versions released to PyPI in the past 12 months, and could be considered as a discontinued project, or that which receives low attention from its maintainers.

As a healthy sign for on-going project maintenance, we found that the GitHub repository had at least 1 pull request or issue interacted with by the community.

Popularity

SMALL
GitHub Stars
5.8k
Forks
832
Contributors
0

Based on project statistics from the GitHub repository for the PyPI package wger, we found that it has been starred 5,750 times.

Community

SUSTAINABLE
Readme
Yes
Contributing.md
Yes
Code of Conduct
No
Contributors
0
Funding
Yes
LICENSE
AGPL-3.0

This project has seen only 10 or less contributors.

We found a way for you to contribute to the project! Looks like wger is missing a Code of Conduct.

License

AGPL-3.0[0,);
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the wger package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Security

SECURITY ISSUES FOUND
Show only direct vulnerabilities in latest version
VulnerabilityVulnerable Version
  • L
Authorization Bypass Through User-Controlled Key

[0,)
  • M
Authorization Bypass Through User-Controlled Key

[0,)
  • M
Authorization Bypass Through User-Controlled Key

[0,)
  • H
Cross-site Request Forgery (CSRF)

[0,)
  • M
Cross-site Scripting (XSS)

[0,)
  • H
Brute Force

[0,)

Package versions

14 VERSIONS IN TOTAL See all versions
versionpublisheddirect vulnerabilities
2.111 Oct, 2022
  • 0
    C
  • 2
    H
  • 3
    M
  • 1
    L
2.01 May, 2021
  • 0
    C
  • 2
    H
  • 3
    M
  • 1
    L
1.929 Jun, 2020
  • 0
    C
  • 2
    H
  • 3
    M
  • 1
    L
1.85 Apr, 2017
  • 0
    C
  • 2
    H
  • 3
    M
  • 1
    L
1.728 Feb, 2016
  • 0
    C
  • 2
    H
  • 3
    M
  • 1
    L
1.6.125 Jul, 2015
  • 0
    C
  • 2
    H
  • 4
    M
  • 1
    L
1.625 Jul, 2015
  • 0
    C
  • 2
    H
  • 4
    M
  • 1
    L
1.516 Dec, 2014
  • 0
    C
  • 2
    H
  • 4
    M
  • 1
    L
1.48 Mar, 2014
  • 0
    C
  • 2
    H
  • 4
    M
  • 1
    L
1.327 Nov, 2013
  • 0
    C
  • 2
    H
  • 4
    M
  • 1
    L

wger dependencies

23 IN TOTAL
djangodjango-activity-streamdjango-bootstrap-breadcrumbsdjango-compressordjango-cors-headersdjango-crispy-formsdjango-email-verificationdjango-environdjango-extensionsdjango-filterdjango-formtoolsdjango-recaptchadjango-simple-historydjango-sortedm2mdjango-storagesdjangorestframeworkeasy-thumbnailsfontawesomefreeicalendarinvoke
Show more dependencies