wagtail vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

GHSA-JM5P-837G-RV8GMediumwagtail: Wagtail: Improper restriction handling on Page translation API endpoint GHSA-X5CX-W6P2-MXF2Mediumwagtail: Wagtail: Improper permission handling when copying snippets GHSA-C2XX-CJMH-9Q8FMediumwagtail: Wagtail: Improper restriction handling on descendant collections in Documents and Images API GHSA-92HV-J533-69WCLowwagtail: Wagtail: Identification of documents by SHA1 hash CVE-2026-55468Mediumwagtail: Wagtail: Improper restriction handling on Pages admin API CVE-2026-54263Highwagtail: Wagtail: Reflected XSS in dynamic image URL generator view CVE-2026-54262Mediumwagtail: Wagtail: Pages translations can be created without page permissions when using simple_translation CVE-2026-54261Mediumwagtail: Wagtail: Improper permission handling in image preview CVE-2026-54260Mediumwagtail: Wagtail: Denial of service via unbounded filter specs in the image preview CVE-2026-54259Mediumwagtail: Wagtail: Improper restriction handling on Documents and Images chosen endpoints CVE-2026-44200Mediumwagtail: Wagtail has improper permission handling when copying pages CVE-2026-44201Mediumwagtail: Wagtail has improper restriction handling on Documents and Images API CVE-2026-44199Mediumwagtail: Wagtail has improper permission handling when deleting form submissions CVE-2026-44198Mediumwagtail: Wagtail has improper permission handling when viewing page history CVE-2026-44197Mediumwagtail: Wagtail has improper permission handling when comparing revisions CVE-2026-28223Mediumwagtail: Wagtail Vulnerable to Cross-site Scripting in simple_translation admin interface CVE-2026-28222Mediumwagtail: Wagtail Vulnerable to Cross-site Scripting in TableBlock class attributes CVE-2026-25517Mediumwagtail: Wagtail has improper permission handling on admin preview endpoints CVE-2024-39317Highwagtail: Wagtail regular expression denial-of-service via search query parsing CVE-2024-35228Mediumwagtail: Improper Handling of Insufficient Permissions in `wagtail.contrib.settings`CVE-2024-32882Lowwagtail: Wagtail has permission check bypass when editing a model with per-field restrictions through `wagtail.contrib.settings` or `ModelViewSet`CVE-2023-45809Lowwagtail: Wagtail vulnerable to disclosure of user names via admin bulk action views CVE-2023-28837Mediumwagtail: Wagtail vulnerable to denial-of-service via memory exhaustion when uploading large files CVE-2023-28836Highwagtail: Wagtail vulnerable to stored Cross-site Scripting attack via ModelAdmin views CVE-2022-21683Mediumwagtail: Comment reply notifications sent to incorrect users

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo