Skip to content
OpenAdvisories

Vendor

GBIF

4 known vulnerabilities.

Products

Integrated Publishing Toolkit 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.6
    CVE-2026-71880

    Server-side template injection in Integrated Publishing Toolkit

    Interpretation of untrusted input in template engine in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to access server-side files and state via template injection

    GBIF Integrated Publishing Toolkit