Skip to content
OpenAdvisories

Vendor

OWASP

8 known vulnerabilities.

Products

ModSecurity Core Rule Set 4 DefectDojo 2 java-html-sanitizer 1 NodeGoat 1 ModSecurity 0
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-16764 Public exploit

    OWASP DefectDojo API/Web serializers.py UserSerializer privileges management

    A vulnerability was identified in OWASP DefectDojo 2.59.0. This issue affects the function UserSerializer of the file dojo/api_v2/serializers.py of the component API/Web. Such manipulation of the argument is_staff leads to improper privilege management. The a…

    OWASP DefectDojo
  • Medium 4.3
    CVE-2026-3816

    OWASP DefectDojo SonarQubeParser/MSDefenderParser parser.py input_zip.read denial of service

    A security vulnerability has been detected in OWASP DefectDojo up to 2.55.4. This vulnerability affects the function input_zip.read of the file parser.py of the component SonarQubeParser/MSDefenderParser. The manipulation leads to denial of service. The attac…

    OWASP DefectDojo
  • Medium 4.3
    CVE-2021-4247

    OWASP NodeGoat Query Parameter research.js denial of service

    A vulnerability has been found in OWASP NodeGoat and classified as problematic. This vulnerability affects unknown code of the file app/routes/research.js of the component Query Parameter Handler. The manipulation leads to denial of service. The attack can be…

    OWASP NodeGoat