CVE-2026-42032

< 2.10.10

CKAN is an open-source DMS (data management system) for powering data hubs and data portals. Prior to 2.10.10 and 2.11.5, a vulner

9.1CRITICAL

CVE-2026-42031

< 2.10.10

CKAN is an open-source DMS (data management system) for powering data hubs and data portals. Prior to 2.10.10 and 2.11.5, a vulner

9.8CRITICAL

CVE-2026-41255

< 2.10.10

CKAN is an open-source DMS (data management system) for powering data hubs and data portals. Prior to 2.10.10 and 2.11.5, Access t

6.1MEDIUM

CVE-2026-41132

< 2.10.10

CKAN is an open-source DMS (data management system) for powering data hubs and data portals. Prior to 2.10.10 and 2.11.5, the conf

7.4HIGH

CVE-2024-43371

< 2.10.5

CKAN is an open-source data management system for powering data hubs and data portals. There are a number of CKAN plugins, includi

4.5MEDIUM

CVE-2024-41675

>= 2.7.0 and < 2.10.5

CKAN is an open-source data management system for powering data hubs and data portals. The Datatables view plugin did not properly

6.8MEDIUM

CVE-2024-41674

>= 2.0 and < 2.10.5

CKAN is an open-source data management system for powering data hubs and data portals. If there were connection issues with the So

5.3MEDIUM

CVE-2024-27097

>= 2.0 and < 2.9.11

A user endpoint didn't perform filtering on an incoming parameter, which was added directly to the application log. This could lea

4.3MEDIUM

CVE-2023-50248

>= 2.0 and < 2.9.10

CKAN is an open-source data management system for powering data hubs and data portals. Starting in version 2.0.0 and prior to vers

4.5MEDIUM

CVE-2023-32696

< 2.9.9

CKAN is an open-source data management system for powering data hubs and data portals. Prior to versions 2.9.9 and 2.10.1, the `ck

8.8HIGH

CVE-2023-32321

>= 2.9.0 and < 2.9.9

CKAN is an open-source data management system for powering data hubs and data portals. Multiple vulnerabilities have been discover

9.8CRITICAL

CVE-2023-22746

< 2.8.12

CKAN is an open-source DMS (data management system) for powering data hubs and data portals. When creating a new container based o

8.6HIGH

CVE-2022-43685

< 2.8.12

CKAN through 2.9.6 account takeovers by unauthenticated users when an existing user id is sent via an HTTP POST request. This allo

8.8HIGH

CVE-2021-25967

>= 2.9.0 and <= 2.9.3

In CKAN, versions 2.9.0 to 2.9.3 are affected by a stored XSS vulnerability via SVG file upload of users’ profile picture. This

5.4MEDIUM