Latest version: v2.10.4
CVE/PVE | Vulnerability ID | Advisory | Affected versions | Severity | Severity Score |
---|---|---|---|---|---|
PVE-2021-39613 | 39613 |
Ckan 2.6.9, 2.7.7 and 2.8.4 fix a code injection issue in the autocom… |
|
HIDDEN | X.Y |
CVE-2023-32696 | 64195 |
CKAN is an open-source data management system for powering data hubs … |
|
HIGH | 8.8 |
CVE-2023-22746 | 62888 |
CKAN is an open-source DMS (data management system) for powering data… |
|
HIGH | 7.5 |
CVE-2023-32321 | 64193 |
CKAN is an open-source data management system for powering data hubs … |
|
CRITICAL | 9.8 |
CVE-2023-50248 | 65383 |
CKAN is an open-source data management system for powering data hubs … |
|
MEDIUM | 6.5 |
CVE-2021-25967 | 54196 |
In CKAN, versions 2.9.0 to 2.9.3 are affected by a stored XSS vulnera… |
|
MEDIUM | 5.4 |
PVE-2021-34558 | 34558 |
Ckan 1.8.1 fixes a possible XSS vulnerability on html input. https:/… |
|
HIDDEN | X.Y |
PVE-2021-34556 | 34556 |
ckan 1.5.1 fixes a security issue affecting CKAN v1.5 and before. |
|
- | - |
CVE-2022-43685 | 54589 |
CKAN through 2.9.6 account takeovers by unauthenticated users when an… |
|
HIGH | 8.8 |