Browse CVEs

CRITICAL 9.8 CVE-2026-42031 CKAN is an open-source DMS (data management system) for powering data hubs and data portals. Prior to 2.10.10 and 2.11.5, a vulnerability in datastor… Ckan 2.10.10 / 2.11.5+ Fix from $2,3002026-05-13 CRITICAL 9.1 CVE-2026-42032 CKAN is an open-source DMS (data management system) for powering data hubs and data portals. Prior to 2.10.10 and 2.11.5, a vulnerability in datastor… Ckan 2.10.10 / 2.11.5+ Fix from $2,3002026-05-13 MEDIUM 6.1 CVE-2026-41255 CKAN is an open-source DMS (data management system) for powering data hubs and data portals. Prior to 2.10.10 and 2.11.5, Access to the views via tok… Ckan 2.10.10 / 2.11.5+ Fix from $1,6002026-05-13 HIGH 7.4 CVE-2026-41132 CKAN is an open-source DMS (data management system) for powering data hubs and data portals. Prior to 2.10.10 and 2.11.5, the configured SMTP server … Ckan 2.10.10 / 2.11.5+ Fix from $1,9502026-05-13 MEDIUM 6.5 CVE-2024-43371 CKAN is an open-source data management system for powering data hubs and data portals. There are a number of CKAN plugins, including XLoader, DataPus… Ckan 2.10.5+ Fix from $1,6002024-08-21 MEDIUM 6.1 CVE-2024-41675 CKAN is an open-source data management system for powering data hubs and data portals. The Datatables view plugin did not properly escape record data… Ckan 2.10.5+ Fix from $1,6002024-08-21 MEDIUM 5.3 CVE-2024-41674 CKAN is an open-source data management system for powering data hubs and data portals. If there were connection issues with the Solr server, the inte… Ckan 2.10.5+ Fix from $1,6002024-08-21 MEDIUM 5.3 CVE-2024-27097 A user endpoint didn't perform filtering on an incoming parameter, which was added directly to the application log. This could lead to an attacker in… Ckan 2.9.11 / 2.10.4+ Fix from $1,6002024-03-13 MEDIUM 6.5 CVE-2023-50248 CKAN is an open-source data management system for powering data hubs and data portals. Starting in version 2.0.0 and prior to versions 2.9.10 and 2.1… Ckan 2.9.10 / 2.10.3+ Fix from $1,6002023-12-13 HIGH 8.8 CVE-2023-32696 CKAN is an open-source data management system for powering data hubs and data portals. Prior to versions 2.9.9 and 2.10.1, the `ckan` user (equivalen… Ckan 2.9.9+ Fix from $1,9502023-05-30 CRITICAL 9.8 CVE-2023-32321 CKAN is an open-source data management system for powering data hubs and data portals. Multiple vulnerabilities have been discovered in Ckan which ma… Ckan 2.9.9+ Fix from $2,3002023-05-26 HIGH 7.5 CVE-2023-22746 CKAN is an open-source DMS (data management system) for powering data hubs and data portals. When creating a new container based on one of the Docker… Ckan 2.8.12 / 2.9.7+ Fix from $1,9502023-02-03 HIGH 8.8 CVE-2022-43685 CKAN through 2.9.6 account takeovers by unauthenticated users when an existing user id is sent via an HTTP POST request. This allows a user to take o… Ckan 2.8.12 / 2.9.7+ Fix from $1,9502022-11-22 MEDIUM 5.4 CVE-2021-25967 In CKAN, versions 2.9.0 to 2.9.3 are affected by a stored XSS vulnerability via SVG file upload of users’ profile picture. This allows low privileged… Ckan after 2.9.3 Fix from $1,6002021-12-01