PatchSiren

Gerapy CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM Gerapy CVE published 2026-07-19

CVE-2026-16209

A vulnerability has been found in Gerapy up to 0.9.13, affecting the Project Upload Endpoint in the file gerapy/server/core/views.py. This vulnerability leads to missing authentication, allowing remote attackers to exploit it. The patch bd4891c60315f17611a3b7a651ffe0fba7cfe71e has been released to fix this issue. Users of Gerapy up to 0.9.13 should apply the patch and monitor their installations for suspi [truncated]