Vulnerability index

Browse CVEs

14 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Ckan CRITICAL 9.8
CVE-2026-42031

CKAN is an open-source DMS (data management system) for powering data hubs and data portals. Prior to 2.10.10 and 2.11.5, a vulnerability in datastor…

Fix: 2.10.10 / 2.11.5+
Fix from $2,300 2026-05-13
Ckan CRITICAL 9.1
CVE-2026-42032

CKAN is an open-source DMS (data management system) for powering data hubs and data portals. Prior to 2.10.10 and 2.11.5, a vulnerability in datastor…

Fix: 2.10.10 / 2.11.5+
Fix from $2,300 2026-05-13
Ckan MEDIUM 6.1
CVE-2026-41255

CKAN is an open-source DMS (data management system) for powering data hubs and data portals. Prior to 2.10.10 and 2.11.5, Access to the views via tok…

Fix: 2.10.10 / 2.11.5+
Fix from $1,600 2026-05-13
Ckan HIGH 7.4
CVE-2026-41132

CKAN is an open-source DMS (data management system) for powering data hubs and data portals. Prior to 2.10.10 and 2.11.5, the configured SMTP server …

Fix: 2.10.10 / 2.11.5+
Fix from $1,950 2026-05-13
Ckan MEDIUM 6.5
CVE-2024-43371

CKAN is an open-source data management system for powering data hubs and data portals. There are a number of CKAN plugins, including XLoader, DataPus…

Fix: 2.10.5+
Fix from $1,600 2024-08-21
Ckan MEDIUM 6.1
CVE-2024-41675

CKAN is an open-source data management system for powering data hubs and data portals. The Datatables view plugin did not properly escape record data…

Fix: 2.10.5+
Fix from $1,600 2024-08-21
Ckan MEDIUM 5.3
CVE-2024-41674

CKAN is an open-source data management system for powering data hubs and data portals. If there were connection issues with the Solr server, the inte…

Fix: 2.10.5+
Fix from $1,600 2024-08-21
Ckan MEDIUM 5.3
CVE-2024-27097

A user endpoint didn't perform filtering on an incoming parameter, which was added directly to the application log. This could lead to an attacker in…

Fix: 2.9.11 / 2.10.4+
Fix from $1,600 2024-03-13
Ckan MEDIUM 6.5
CVE-2023-50248

CKAN is an open-source data management system for powering data hubs and data portals. Starting in version 2.0.0 and prior to versions 2.9.10 and 2.1…

Fix: 2.9.10 / 2.10.3+
Fix from $1,600 2023-12-13
Ckan HIGH 8.8
CVE-2023-32696

CKAN is an open-source data management system for powering data hubs and data portals. Prior to versions 2.9.9 and 2.10.1, the `ckan` user (equivalen…

Fix: 2.9.9+
Fix from $1,950 2023-05-30
Ckan CRITICAL 9.8
CVE-2023-32321

CKAN is an open-source data management system for powering data hubs and data portals. Multiple vulnerabilities have been discovered in Ckan which ma…

Fix: 2.9.9+
Fix from $2,300 2023-05-26
Ckan HIGH 7.5
CVE-2023-22746

CKAN is an open-source DMS (data management system) for powering data hubs and data portals. When creating a new container based on one of the Docker…

Fix: 2.8.12 / 2.9.7+
Fix from $1,950 2023-02-03
Ckan HIGH 8.8
CVE-2022-43685

CKAN through 2.9.6 account takeovers by unauthenticated users when an existing user id is sent via an HTTP POST request. This allows a user to take o…

Fix: 2.8.12 / 2.9.7+
Fix from $1,950 2022-11-22
Ckan MEDIUM 5.4
CVE-2021-25967

In CKAN, versions 2.9.0 to 2.9.3 are affected by a stored XSS vulnerability via SVG file upload of users’ profile picture. This allows low privileged…

Fix: after 2.9.3
Fix from $1,600 2021-12-01