Skip to content
OpenAdvisories

Package · PyPI

ckan

15 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.3
    CVE-2026-42031 Public exploit Scanner template

    CKAN: Unauthenticated SQL Injection and Authorization Bypass in `datastore_search_sql`

    CKAN is an open-source DMS (data management system) for powering data hubs and data portals. Prior to 2.10.10 and 2.11.5, a vulnerability in datastore_search_sql allowed attackers to inject SQL in order to gain access to private resources and PostgreSQL syste…

    ckan ckan ckan PyPI
  • High 7.3
    CVE-2025-24372

    XSS vector in user uploaded images in group/org and user profiles in ckan

    CKAN is an open-source DMS (data management system) for powering data hubs and data portals. Using a specially crafted file, a user could potentially upload a file containing code that when executed could send arbitrary requests to the server. If that file wa…

    ckan ckan ckan PyPI
  • High 8.8
    CVE-2022-43685

    CKAN contains Improper Authentication leading to account takeover

    CKAN through 2.9.6 account takeovers by unauthenticated users when an existing user id is sent via an HTTP POST request. This allows a user to take over an existing account including superuser accounts.

    ckan PyPI