Skip to content
OpenAdvisories

Vendor

ckan

16 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.3
    CVE-2026-42031 Public exploit

    CKAN: Unauthenticated SQL Injection and Authorization Bypass in `datastore_search_sql`

    CKAN is an open-source DMS (data management system) for powering data hubs and data portals. Prior to 2.10.10 and 2.11.5, a vulnerability in datastore_search_sql allowed attackers to inject SQL in order to gain access to private resources and PostgreSQL syste…