ckan vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-42032Mediumckan: CKAN has Unauthenticated Authorization Bypass in `datastore_search_sql`CVE-2026-42031Highckan: CKAN has Unauthenticated SQL Injection and Authorization Bypass in `datastore_search_sql`CVE-2026-41255Mediumckan: CKAN has CSRF exemption primed by anonymous requests CVE-2026-41132Mediumckan: CKAN has no certificate validation on STMP connection CVE-2025-64100Mediumckan: CKAN vulnerable to fixed session IDs CVE-2025-54384Mediumckan: CKAN vulnerable to stored XSS in resource description CVE-2025-24372Highckan: CKAN has an XSS vector in user uploaded images in group/org and user profiles CVE-2024-43371Mediumckan: Potential access to sensitive URLs via CKAN extensions (SSRF)CVE-2024-41675Mediumckan: CKAN has Cross-site Scripting vector in the Datatables view plugin CVE-2024-41674Mediumckan: CKAN may leak Solr credentials via error message in package_search action CVE-2024-27097Mediumckan: Potential log injection in reset user endpoint in CKAN CVE-2023-50248Mediumckan: Out of memory error when submitting the dataset form with a specially-crafted field CVE-2023-32321Criticalckan: Ckan remote code execution and private information access via crafted resource ids CVE-2022-43685Highckan: CKAN contains Improper Authentication leading to account takeover CVE-2021-25967Mediumckan: Cross-site Scripting in CKAN

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo