Security Advisories

medium2026-08-20

CVE-2026-54624-django CMS: Structure endpoint bypasses page-view permission

View chart

django-cms/django-cms · GHSA-vgxm-h9gx-h9w7

medium2026-08-20

CVE-2026-54622-django CMS: Clipboard copy IDOR discloses unauthorized plugin content

View chart

django-cms/django-cms · GHSA-4xfr-4p46-gc6p

high2026-08-20

CVE-2026-54263-Wagtail: Reflected XSS in dynamic image URL generator view

View chart

wagtail/wagtail · GHSA-23m2-mghx-vqmf

medium2026-08-20

CVE-2026-54262-Wagtail: Pages translations can be created without page permissions when using simple_translation

View chart

wagtail/wagtail · GHSA-8634-mr4j-r72c

medium2026-08-20

CVE-2026-54261-Wagtail: Improper permission handling in image preview

View chart

wagtail/wagtail · GHSA-r6p4-grq7-xm4m

medium2026-08-20

CVE-2026-54260-Wagtail: Denial of service via unbounded filter specs in the image preview

View chart

wagtail/wagtail · GHSA-f2p5-j6fg-5cxf

medium2026-08-20

CVE-2026-54259-Wagtail: Improper restriction handling on Documents and Images chosen endpoints

View chart

wagtail/wagtail · GHSA-h54r-xq46-qwqm

medium2026-08-20

CVE-2026-54256-Winter: Authenticated IDOR in backend FileUpload widget allows cross-user access to attachment metadata

View chart

wintercms/winter · GHSA-3277-h8g9-qj5f

high2026-08-20

CVE-2026-54251-netty-incubator-codec-ohttp: [OHttpServerCodec] Native Direct-Memory Leak on AEAD Decryption Failure Leads to Gateway Denial of Service

View chart

netty/netty-incubator-codec-ohttp · GHSA-vmr9-j6wf-pmh2

high2026-08-20

CVE-2026-54245-Fleet: SQL injection in Okta conditional access endpoint allows host-controlled compromise of the Fleet database

View chart

fleetdm/fleet · GHSA-7q96-f8xw-jv5j

high2026-08-20

CVE-2026-54182-Laravel Backpack CRUD: OS command injection in Stats::makeCurlRequest via attacker-controlled Host header (pre-auth)

View chart

laravel-backpack/crud · GHSA-mrc5-3mm3-45c5

medium2026-08-20

CVE-2026-54181-Laravel Backpack CRUD: Stored XSS in the color column — the `@if($column['escaped'])` branches are inverted

View chart

laravel-backpack/crud · GHSA-mmg4-322v-6jvc

high2026-08-20

CVE-2026-54180-Laravel Backpack CRUD: CRUD panel query scopes are not enforced on Update, Delete, and Reorder (cross-tenant IDOR)

View chart

laravel-backpack/crud · GHSA-vgmv-8xjc-6rch

medium2026-08-20

CVE-2026-54179-Laravel Backpack CRUD: SingleBase64Image accepts any base64 payload behind a `data:image` prefix — SVG-with-script lands on the public disk

View chart

laravel-backpack/crud · GHSA-8hw4-7qjr-3wxg

high2026-08-20

CVE-2026-54178-Laravel Backpack CRUD: Arbitrary file deletion via attacker-controlled clear_<attr>[] in HasUploadFields::uploadMultipleFilesToDisk

View chart

laravel-backpack/crud · GHSA-8xjm-wqrp-2f25

medium2026-08-20

CVE-2026-54177-Laravel Backpack CRUD: HasUploadFields keeps the attacker-supplied file extension — public-disk uploads of `shell.php` reach the webserver

View chart

laravel-backpack/crud · GHSA-8q2w-pv9p-mjvc

medium2026-08-20

CVE-2026-54176-Laravel Backpack CRUD: MyAccountController allows changing the login email without a current-password check

View chart

laravel-backpack/crud · GHSA-9fw9-8c49-qch8

high2026-08-20

CVE-2026-54175-Laravel Backpack CRUD: Unverified password change in MyAccountController via mass assignment

View chart

laravel-backpack/crud · GHSA-xpv2-hrfc-hw62

critical2026-08-20

CVE-2026-55445-Qinglong has an incomplete fix for CVE-2026-3965: Improper Authentication

View chart

whyour/qinglong · GHSA-v667-gc2r-2xm7

medium2026-08-20

CVE-2026-54168-Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution

View chart

tektoncd/pipelines-as-code · GHSA-6f2p-296r-cc28