CVE-2026-40258 | gramps-project gramps-web-api up to 3.11.0 Gramps Web API path traversal

April 17, 2026 Yanac

A vulnerability classified as critical was found in gramps-project gramps-web-api up to 3.11.0. This issue affects some unknown processing of the component Gramps Web API. Executing a manipulation can lead to path traversal.

This vulnerability is registered as CVE-2026-40258. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More