Vulnerabilities in ckan
16 resultsCVE-2026-42031HIGHCKAN: Unauthenticated SQL Injection and Authorization Bypass in `datastore_search_sql`EPSS 1.8%CVE-2023-32321CRITICALCKAN remote code execution and private information access via crafted resource idsEPSS 1.7%CVE-2023-32696HIGHExcessive permissions for ckan userEPSS 0.8%CVE-2023-22746HIGHCKAN is vulnerable to session secret shared across instances using Docker imagesEPSS 0.7%CVE-2023-50248MEDIUMCKAN out of memory error when submitting the dataset form with a specially-crafted fieldEPSS 0.6%CVE-2021-25967MEDIUMCKAN - Stored Cross-Site Scripting (XSS) via SVG File UploadEPSS 0.5%CVE-2024-27097MEDIUMPotential log injection in reset user endpoint in ckanEPSS 0.4%CVE-2025-24372HIGHXSS vector in user uploaded images in group/org and user profiles in ckanEPSS 0.4%CVE-2024-41674MEDIUMCKAN may leak Solr credentials via error message in package_search actionEPSS 0.4%CVE-2024-41675MEDIUMCKAN has a Cross-site Scripting vector in the Datatables view pluginEPSS 0.4%CVE-2026-42032MEDIUMCKAN: Unauthenticated Authorization Bypass in `datastore_search_sql`EPSS 0.4%CVE-2024-43371MEDIUMPotential access to sensitive URLs via CKAN extensions (SSRF)EPSS 0.3%CVE-2025-64100MEDIUMCKAN Vulnerable to Session Cookie FixationEPSS 0.2%CVE-2026-41132MEDIUMCKAN: No certificate validation on STMP connectionEPSS 0.2%CVE-2025-54384MEDIUMCKAN stored XSS vulnerability in Markdown description fieldsEPSS 0.2%CVE-2026-41255MEDIUMCKAN: CSRF exemption primed by anonymous requestsEPSS 0.1%