VYPR

python-garminconnect

by Garmin

Source repositories

CVEs (1)

  • CVE-2026-54447HigSep 14, 2026
    risk 0.48cvss 8.4epss 0.00

    garminconnect is a Python 3 API wrapper for Garmin Connect that retrieves statistics and manages activities. Prior to 0.3.5, garminconnect/client.py Client.dump creates the OAuth token directory and garmin_tokens.json without explicit owner-only modes, so a permissive umask such…