VYPR

Speakr

by Murtaza Nasir

Source repositories

CVEs (2)

  • CVE-2026-54510HigSep 17, 2026
    risk 0.46cvss 7.1epss

    Speakr is a personal, self-hosted web application designed for transcribing audio recordings. Prior to 0.8.21-alpha, the csrf_exempt_for_api_tokens() before_request hook in src/app.py calls csrf.exempt(view_func), permanently adding the selected view to Flask-WTF's…

  • CVE-2026-45307MedMay 28, 2026
    risk 0.40cvss 6.1epss 0.00

    Speakr is a personal, self-hosted web application designed for transcribing audio recordings. Prior to 0.8.20-alpha, the is_safe_url() helper used to validate post-login redirect targets applied urljoin(request.host_url, target) before parsing, while the controller passed the…