wagtail/wagtail Security Advisories | GitStock

medium2026-08-20

Wagtail: Improper restriction handling on Page translation API endpoint

GHSA-jm5p-837g-rv8g

medium2026-08-20

Wagtail: Improper permission handling when copying snippets

GHSA-x5cx-w6p2-mxf2

medium2026-08-20

Wagtail: Improper restriction handling on descendant collections in Documents and Images API

GHSA-c2xx-cjmh-9q8f

low2026-08-20

Wagtail: Identification of documents by SHA1 hash

GHSA-92hv-j533-69wc

medium2026-08-20

CVE-2026-55468-Wagtail: Improper restriction handling on Pages admin API

GHSA-3vrh-m9w7-v94f

high2026-08-20

CVE-2026-54263-Wagtail: Reflected XSS in dynamic image URL generator view

GHSA-23m2-mghx-vqmf

medium2026-08-20

CVE-2026-54262-Wagtail: Pages translations can be created without page permissions when using simple_translation

GHSA-8634-mr4j-r72c

medium2026-08-20

CVE-2026-54261-Wagtail: Improper permission handling in image preview

GHSA-r6p4-grq7-xm4m

medium2026-08-20

CVE-2026-54260-Wagtail: Denial of service via unbounded filter specs in the image preview

GHSA-f2p5-j6fg-5cxf

medium2026-08-20

CVE-2026-54259-Wagtail: Improper restriction handling on Documents and Images chosen endpoints

GHSA-h54r-xq46-qwqm

medium2026-05-08

CVE-2026-44200-Wagtail has improper permission handling when copying pages

GHSA-67rv-mg8q-5pf3

medium2026-05-08

CVE-2026-44201-Wagtail has improper restriction handling on Documents and Images API

GHSA-p5gm-92h4-6pv6

medium2026-05-08

CVE-2026-44199-Wagtail has improper permission handling when deleting form submissions

GHSA-pwm3-7fv4-g6xx

medium2026-05-08

CVE-2026-44198-Wagtail has improper permission handling when viewing page history

GHSA-c4mr-889m-vgf6

medium2026-05-08

CVE-2026-44197-Wagtail has improper permission handling when comparing revisions

GHSA-c6wj-9vcj-75pj

medium2026-03-03

CVE-2026-28223- Wagtail Vulnerable to Cross-site Scripting in simple_translation admin interface

GHSA-p4v8-rw59-93cq

medium2026-03-03

CVE-2026-28222-Wagtail Vulnerable to Cross-site Scripting in TableBlock class attributes

GHSA-p5cm-246w-84jm

medium2026-02-03

CVE-2026-25517-Wagtail has improper permission handling on admin preview endpoints

GHSA-4qvv-g3vr-m348

high2024-07-11

CVE-2024-39317-Wagtail regular expression denial-of-service via search query parsing

GHSA-jmp3-39vp-fwg8

medium2024-06-02

CVE-2024-35228-Improper Handling of Insufficient Permissions in `wagtail.contrib.settings`

GHSA-xxfm-vmcf-g33f