Refer to the OpenWISP Security Policy.
Repository navigation
Security: openwisp/openwisp-users
Security
.github/SECURITY.md
-
Organization managers can change an owner's membershipGHSA-7h4r-39v5-q7cq published
Nov 13, 2026 by nemesifierModerate -
Organization deactivation can retain cached authorizationGHSA-x794-gqv9-rffh published
Nov 13, 2026 by nemesifierModerate -
User password API bypasses configured password validatorsGHSA-qx7x-g6rx-5g3g published
Nov 13, 2026 by nemesifierLow -
Bulk user actions bypass organization owner protectionsGHSA-q66j-wp8j-5hf5 published
Nov 13, 2026 by nemesifierModerate -
OrganizationUser admin enables cross-organization account takeoverGHSA-p9mp-fxhh-hmfw published
Nov 13, 2026 by nemesifierModerate -
User management API bypasses organization owner protectionsGHSA-97jh-j6hw-4389 published
Nov 13, 2026 by nemesifierModerate
Learn more about advisories related to openwisp/openwisp-users in the GitHub Advisory Database