| Ckan remote code execution and private information access via crafted resource idsCVE-2023-32321 · GHSA-446M-HMMM-HM8MVersion ranges need review. |
ckan |
PyPI |
Critical
|
Fix reported |
|
| Potential log injection in reset user endpoint in CKANCVE-2024-27097 · GHSA-8G38-3M6V-232JVersion ranges need review. |
ckan |
PyPI |
Medium
|
Fix reported |
|
| Out of memory error when submitting the dataset form with a specially-crafted fieldCVE-2023-50248 · GHSA-7FGC-89CX-W8J5Version ranges need review. |
ckan |
PyPI |
Medium
|
Fix reported |
|
| CKAN has Unauthenticated SQL Injection and Authorization Bypass in `datastore_search_sql`CVE-2026-42031 · GHSA-H7J7-3RX6-XVCGVersion ranges need review. |
ckan |
PyPI |
High
|
Fix reported |
|
| CKAN has CSRF exemption primed by anonymous requestsCVE-2026-41255 · GHSA-MCVF-JXCW-VJ73Version ranges need review. |
ckan |
PyPI |
Medium
|
Fix reported |
|
| CKAN has no certificate validation on STMP connectionCVE-2026-41132 · GHSA-MPFM-FPGX-647QVersion ranges need review. |
ckan |
PyPI |
Medium
|
Fix reported |
|
| CKAN has Unauthenticated Authorization Bypass in `datastore_search_sql`CVE-2026-42032 · GHSA-CG4X-64P3-X59HVersion ranges need review. |
ckan |
PyPI |
Medium
|
Fix reported |
|
| CKAN has Cross-site Scripting vector in the Datatables view pluginCVE-2024-41675 · GHSA-R3JC-VHF4-6V32Version ranges need review. |
ckan |
PyPI |
Medium
|
Fix reported |
|
| CKAN has an XSS vector in user uploaded images in group/org and user profilesCVE-2025-24372 · GHSA-7PQ5-QCP6-MCWWVersion ranges need review. |
ckan |
PyPI |
High
|
Fix reported |
|
| Potential access to sensitive URLs via CKAN extensions (SSRF)CVE-2024-43371 · GHSA-G9PH-J5VJ-F8WMVersion ranges need review. |
ckan |
PyPI |
Medium
|
Fix reported |
|
| CKAN vulnerable to fixed session IDsCVE-2025-64100 · GHSA-2HVH-CW5C-8Q8QVersion ranges need review. |
ckan |
PyPI |
Medium
|
Fix reported |
|
| CKAN may leak Solr credentials via error message in package_search actionCVE-2024-41674 · GHSA-2RQW-CFHC-35FHVersion ranges need review. |
ckan |
PyPI |
Medium
|
Fix reported |
|
| CKAN vulnerable to stored XSS in resource descriptionCVE-2025-54384 · GHSA-2R4H-8JXV-W2J8Version ranges need review. |
ckan |
PyPI |
Medium
|
Fix reported |
|
| CKAN contains Improper Authentication leading to account takeoverCVE-2022-43685 · GHSA-M2XP-JXFG-QQ6GVersion ranges need review. |
ckan |
PyPI |
High
|
Fix reported |
|
| Cross-site Scripting in CKANCVE-2021-25967 · GHSA-6W9P-88QG-P3G3Version ranges need review. |
ckan |
PyPI |
Medium
|
Fix reported |
|
