ckan vulnerabilities

CVEs per yearBy the year they were published

1. 20211
2. 20234
3. 20244
4. 20253
5. 20264

Newest CVEs

• CVE-2026-42032

  CKAN: Unauthenticated Authorization Bypass in `datastore_search_sql`

  ckan · ckan

  Medium6.7
• CVE-2026-41255

  CKAN: CSRF exemption primed by anonymous requests

  ckan · ckan

  Medium6.1
• CVE-2026-41132

  CKAN: No certificate validation on STMP connection

  ckan · ckan

  Medium6.6
• CVE-2026-42031

  CKAN: Unauthenticated SQL Injection and Authorization Bypass in `datastore_search_sql`

  ckan · ckan

  High8.3
• CVE-2025-64100

  CKAN Vulnerable to Session Cookie Fixation

  ckan · ckan

  Medium6.1
• CVE-2025-54384

  CKAN stored XSS vulnerability in Markdown description fields

  ckan · ckan

  Medium6.3
• CVE-2025-24372

  XSS vector in user uploaded images in group/org and user profiles in ckan

  ckan · ckan

  High7.3
• CVE-2024-43371

  Potential access to sensitive URLs via CKAN extensions (SSRF)

  ckan · ckan

  Medium4.5
• CVE-2024-41675

  CKAN has a Cross-site Scripting vector in the Datatables view plugin

  ckan · ckan

  Medium6.8
• CVE-2024-41674

  CKAN may leak Solr credentials via error message in package_search action

  ckan · ckan

  Medium5.3