CVE-2019-13489: Trape Project Trape

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

Trape through 2019-05-08 has SQL injection via the data[2] variable in core/db.py, as demonstrated by the /bs t parameter.

Affected products

• Trape Project Trape: up to and including 2019-05-08

Published 2019-07-10. Last modified 2026-06-17.