Medium
CVE-2026-41255
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 15
Reset filters
High
CVE-2026-42031
CKAN has Unauthenticated SQL Injection and Authorization Bypass in `datastore_search_sql`
Medium
CVE-2026-42032
CKAN has Unauthenticated Authorization Bypass in `datastore_search_sql`
Medium
CVE-2026-41132
CKAN has no certificate validation on STMP connection
Medium
CVE-2025-64100
CKAN vulnerable to fixed session IDs
Medium
CVE-2025-54384
CKAN vulnerable to stored XSS in resource description
High
CVE-2025-24372
CKAN has an XSS vector in user uploaded images in group/org and user profiles
Medium
CVE-2024-41674
CKAN may leak Solr credentials via error message in package_search action
Medium
CVE-2024-41675
CKAN has Cross-site Scripting vector in the Datatables view plugin
Medium
CVE-2024-43371
Potential access to sensitive URLs via CKAN extensions (SSRF)
Medium
CVE-2024-27097
Potential log injection in reset user endpoint in CKAN
Medium
CVE-2023-50248
Out of memory error when submitting the dataset form with a specially-crafted field
Critical
CVE-2023-32321
Ckan remote code execution and private information access via crafted resource ids
High
CVE-2022-43685
CKAN through 2.9.6 account takeovers by unauthenticated users when an existing user id is sent via an HTTP POST request. This allows a user to take over an existing account including superuser account
Medium
CVE-2021-25967
Cross-site Scripting in CKAN
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.