Skip to content
OpenAdvisories

Package · Debian

qgis

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 6.1
    CVE-2026-104140

    QGIS: Stored XSS in WFS3 getFeatures HTML page via unescaped feature attribute values

    QGIS is a free, open source, cross-platform geographic information system. Prior to 3.44.12 and 4.0.0 through 4.2.3, QGIS Server renders feature data in WFS3 (OGC API Features) HTML responses without HTML escaping. Attacker-controlled feature.properties value…

    qgis QGIS qgis qgis Debian Ubuntu