Skip to content
OpenAdvisories

Package · Ubuntu

qgis

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.1
    CVE-2026-104140

    QGIS: Stored XSS in WFS3 getFeatures HTML page via unescaped feature attribute values

    QGIS is a free, open source, cross-platform geographic information system. Prior to 3.44.12 and 4.0.0 through 4.2.3, QGIS Server renders feature data in WFS3 (OGC API Features) HTML responses without HTML escaping. Attacker-controlled feature.properties value…

    qgis QGIS qgis qgis Debian Ubuntu
  • High 8.7
    CVE-2026-24480 Public exploit

    QGIS had validated RCE and Repository Takeover via GitHub Actions

    QGIS is a free, open source, cross platform geographical information system (GIS) The repository contains a GitHub Actions workflow called "pre-commit checks" that, before commit 76a693cd91650f9b4e83edac525e5e4f90d954e9, was vulnerable to remote code executio…

    qgis QGIS qgis Ubuntu