Cckan

Products

Exploited and recent CVEs

• CVE-2026-42032 Medium 6.7 CKAN: Unauthenticated Authorization Bypass in `datastore_search_sql` 0.4%
• CVE-2026-41255 Medium 6.1 CKAN: CSRF exemption primed by anonymous requests 0.1%
• CVE-2026-41132 Medium 6.6 CKAN: No certificate validation on STMP connection 0.2%
• CVE-2026-42031 High 8.3 CKAN: Unauthenticated SQL Injection and Authorization Bypass in `datastore_search_sql` 1.8%
• CVE-2025-64100 Medium 6.1 CKAN Vulnerable to Session Cookie Fixation 0.3%
• CVE-2025-54384 Medium 6.3 CKAN stored XSS vulnerability in Markdown description fields 0.2%
• CVE-2025-24372 High 7.3 XSS vector in user uploaded images in group/org and user profiles in ckan 0.5%
• CVE-2024-43371 Medium 4.5 Potential access to sensitive URLs via CKAN extensions (SSRF) 0.4%
• CVE-2024-41675 Medium 6.8 CKAN has a Cross-site Scripting vector in the Datatables view plugin 0.4%
• CVE-2024-41674 Medium 5.3 CKAN may leak Solr credentials via error message in package_search action 0.4%
• CVE-2024-27097 Medium 4.3 Potential log injection in reset user endpoint in ckan 0.4%
• CVE-2023-50248 Medium 4.5 CKAN out of memory error when submitting the dataset form with a specially-crafted field 0.6%
• CVE-2023-32696 High 8.8 Excessive permissions for ckan user 0.8%
• CVE-2023-32321 Critical 9.8 CKAN remote code execution and private information access via crafted resource ids 1.7%
• CVE-2023-22746 High 8.6 CKAN is vulnerable to session secret shared across instances using Docker images 0.7%
• CVE-2021-25967 Medium 5.4 CKAN - Stored Cross-Site Scripting (XSS) via SVG File Upload 0.5%