Skip to content
OpenAdvisories

Product · OWASP

DefectDojo

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-16764 Public exploit

    OWASP DefectDojo API/Web serializers.py UserSerializer privileges management

    A vulnerability was identified in OWASP DefectDojo 2.59.0. This issue affects the function UserSerializer of the file dojo/api_v2/serializers.py of the component API/Web. Such manipulation of the argument is_staff leads to improper privilege management. The a…

    OWASP DefectDojo
  • Medium 4.3
    CVE-2026-3816

    OWASP DefectDojo SonarQubeParser/MSDefenderParser parser.py input_zip.read denial of service

    A security vulnerability has been detected in OWASP DefectDojo up to 2.55.4. This vulnerability affects the function input_zip.read of the file parser.py of the component SonarQubeParser/MSDefenderParser. The manipulation leads to denial of service. The attac…

    OWASP DefectDojo