The latest version of fava with no known security vulnerabilities is 1.27.3. We recommend installing version 1.27.3.
The information on this page was curated by experts in our Cybersecurity Intelligence Team.
- Latest release
-
v1.27.3 at March 11, 2024
- License
-
MIT (MIT License)
Description
Web interface for the accounting tool Beancount.
Affected versions:
>=0,<1.22.3
Fava before 1.22.3 is vulnerable to reflected cross-site scrip…
Affected versions:
>=0,<1.22.2
Cross-site Scripting (XSS) - Reflected in GitHub repository be…
Affected versions:
>=0,<1.22
The time and filter parameters in Fava prior to v1.22 are vuln…
Has known vulnerabilities
- 1.27.3
- 1.27.2
- 1.27.1
- 1.27
- 1.26.4
- 1.26.3
- 1.26.2
- 1.26.1
- 1.26
- 1.25.1
- 1.25
- 1.24.4
- 1.24.3
- 1.24.2
- 1.24.1
- 1.24
- 1.23.1
- 1.23
- 1.22.3
- 1.22.2