CVE-2026-86255

wger (versions before 2.5 ) fails to validate the maximum duration of routine date ranges, allowing authenticated users to create routines spanning arbitrarily long periods. The date_sequence computation triggered via routine detail endpoints forces the server to iterate thousands of times per re...