CVE-2021-41262

Galette is a membership management web application built for non profit organizations and released under GPLv3. Versions prior to 0.9.6 are subject to SQL injection attacks by users with "member" privilege. Users are advised to upgrade to version 0.9.6 as soon as possible. There are no known workarounds.

• CWE-89

• https://github.com/galette/galette/commit/8e940641b5ed46c3f471332827df388ea00a85d3Patch, Third Party Advisory
• https://github.com/galette/galette/security/advisories/GHSA-936f-xvgq-fg74Third Party Advisory
• https://github.com/galette/galette/commit/8e940641b5ed46c3f471332827df388ea00a85d3Patch, Third Party Advisory
• https://github.com/galette/galette/security/advisories/GHSA-936f-xvgq-fg74Third Party Advisory

Published

Dec 16, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-41256nextcloud news-android is an Android client for the Nextclou…7.1
• CVE-2021-41258Kirby is an open source file structured CMS. In affected ver…5.4
• CVE-2021-41259Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-4126When receiving an OpenPGP/MIME signed email message that con…6.5
• CVE-2021-41260Galette is a membership management web application built for…8.8
• CVE-2021-41261Galette is a membership management web application built for…4.8
• CVE-2021-41263rails_multisite provides multi-db support for Rails applicat…8.8
• CVE-2021-41264OpenZeppelin Contracts is a library for smart contract devel…9.8
• CVE-2021-41265Flask-AppBuilder is a development framework built on top of …8.8
• CVE-2021-41266Minio console is a graphical user interface for the for MinI…9.8
• CVE-2021-41267Symfony/Http-Kernel is the HTTP kernel component for Symfony…6.5
• CVE-2021-41268Symfony/SecurityBundle is the security system for Symfony, a…8.8