Skip to content
OpenAdvisories

Vendor

4TUResearchData

2 known vulnerabilities.

Products

djehuty 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2026-73976

    djehuty: Unauthenticated SPARQL injection in the search API (`order`, `operator`, `key`)

    djehuty is a research data repository system developed by 4TU.ResearchData. Prior to version 26.3.2, An unauthenticated attacker can inject SPARQL into the search/listing queries through three separate parameters. Because the affected queries are read (SELECT…

    4TUResearchData djehuty
  • High 8.4
    CVE-2026-73975

    djehuty: Authenticated SPARQL injection in session editing allows writing arbitrary RDF triples

    djehuty is a research data repository system developed by 4TU.ResearchData. Prior to version 26.3.2, an authenticated depositor can inject arbitrary SPARQL into a state-modifying (DELETE/INSERT) query by supplying a crafted session name, letting them write (a…

    4TUResearchData djehuty