ckan Latest Vulnerabilities

Latest vulnerabilities published by ckan

JSON RSS CSV 🔔 Create Alert Trigger

29 October 2025

Session Fixation Vulnerability in CKAN Data Management System
CVE-2025-64100
CkanCkan6.1MEDIUM
Cross-Site Scripting Vulnerability in CKAN Data Management System
CVE-2025-54384
CkanCkan6.3MEDIUM

5 February 2025

File Upload Vulnerability in CKAN Data Management System
CVE-2025-24372
CkanCkan7.3HIGH

21 August 2024

Protecting Against Server Side Request Forgery (SSRF) in CKAN
CVE-2024-43371
CkanCkan6.5MEDIUM
CKAN DataTable View Plugin Vulnerability
CVE-2024-41675
CkanCkan6.1MEDIUM
CKAN patches Solr server leak to prevent potential security risk
CVE-2024-41674
CkanCkan5.3MEDIUM

13 March 2024

False Log Entries or Log File Corruption Possible Due to Endpoint Failure to Filter Incoming Parameter
CVE-2024-27097
CkanCkan5.3MEDIUM

13 December 2023

CKAN out of memory error when submitting the dataset form with a specially-crafted field
CVE-2023-50248
ckanckan4.5MEDIUM

30 May 2023

Excessive permissions for ckan user
CVE-2023-32696
ckanckan-docker-base8.8HIGH

26 May 2023

CKAN remote code execution and private information access via crafted resource ids
CVE-2023-32321
ckanckan9.8CRITICAL

3 February 2023

CKAN is vulnerable to session secret shared across instances using Docker images
CVE-2023-22746
CkanCkan8.6HIGH

1 December 2021

CKAN - Stored Cross-Site Scripting (XSS) via SVG File Upload
CVE-2021-25967
CkanCkan5.4MEDIUM