Skip to content
OpenAdvisories

Vendor

lektor

2 known vulnerabilities.

Products

lektor 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-104059

    Lektor 3.3.14 CSRF via Admin API Endpoints

    Lektor 3.3.14 and 3.4.0b15 contains a cross-site request forgery vulnerability in the admin API blueprint that allows unauthenticated attackers to perform state-changing actions by sending cross-origin requests without CSRF tokens, Origin/Referer validation, …

    lektor lektor