Vulnerability GHSA-x5cx-w6p2-mxf2
Medium Risk
MEDIUM RISK
CVSS Score: 6.5
Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
2 months ago
August 20, 2026 at 06:45 PM UTC
Wagtail: Improper permission handling when copying snippets
0.1 and 0.2 and 0.3 and 0.3.1 and 0.4 and 0.4.1 and 0.5 and 0.6 and 0.7 and 0.8 and 0.8.1 - 0.8.10 and 1.0b1 and 1.0b2 and 1.0rc1 and 1.0rc2 and 1.0 and 1.1rc1 and 1.1 and 1.2rc1 and 1.2 and 1.3rc1 and 1.3 and 1.3.1 and 1.4rc1 and 1.4 and 1.4.1 - 1.4.6 and 1.5rc1 and 1.5 and 1.5.1 - 1.5.3 and 1.6rc1 and 1.6 and 1.6.1 - 1.6.3 and 1.7rc1 and 1.7 and 1.8rc1 and 1.8 and 1.8.1 - 1.8.2 and 1.9rc1 and 1.9 and 1.9.1 and 1.10rc1 and 1.10 and 1.10.1 and 1.11rc1 and 1.11 and 1.11.1 and 1.12rc1 and 1.12 and 1.12.1 - 1.12.6 and 1.13rc1 and 1.13 and 1.13.1 - 1.13.4 and 2.0b1 and 2.0rc1 and 2.0 and 2.0.1 - 2.0.2 and 2.1rc1 and 2.1rc2 and 2.1 and 2.1.1 - 2.1.3 and 2.2rc1 and 2.2rc2 and 2.2 and 2.2.1 - 2.2.2 and 2.3rc1 and 2.3rc2 and 2.3 and 2.4rc1 and 2.4 and 2.5rc1 and 2.5 and 2.5.1 - 2.5.2 and 2.6rc1 and 2.6 and 2.6.1 - 2.6.3 and 2.7rc1 and 2.7rc2 and 2.7 and 2.7.1 - 2.7.4 and 2.8rc1 and 2.8 and 2.8.1 - 2.8.2 and 2.9rc1 and 2.9 and 2.9.1 - 2.9.3 and 2.10rc1 and 2.10rc2 and 2.10 and 2.10.1 - 2.10.2 and 2.11rc1 and 2.11 and 2.11.1 - 2.11.9 and 2.12rc1 and 2.12 and 2.12.1 - 2.12.6 and 2.13rc1 and 2.13rc2 and 2.13rc3 and 2.13 and 2.13.1 - 2.13.5 and 2.14rc1 and 2.14 and 2.14.1 - 2.14.2 and 2.15rc1 and 2.15rc2 and 2.15 and 2.15.1 - 2.15.6 and 2.16rc1 and 2.16rc2 and 2.16 and 2.16.1 - 2.16.3 and 3.0rc1 and 3.0rc2 and 3.0rc3 and 3.0 and 3.0.1 - 3.0.3 and 4.0rc1 and 4.0rc2 and 4.0 and 4.0.1 - 4.0.4 and 4.1rc1 and 4.1 and 4.1.1 - 4.1.9 and 4.2rc1 and 4.2 and 4.2.1 - 4.2.4 and 5.0rc1 and 5.0 and 5.0.1 - 5.0.5 and 5.1rc1 and 5.1 and 5.1.1 - 5.1.3 and 5.2rc1 and 5.2 and 5.2.1 - 5.2.8 and 6.0rc1 and 6.0 and 6.0.1 - 6.0.6 and 6.1rc1 and 6.1rc2 and 6.1 and 6.1.1 - 6.1.3 and 6.2rc1 and 6.2 and 6.2.1 - 6.2.4 and 6.3rc1 and 6.3rc2 and 6.3 and 6.3.1 - 6.3.8 and 6.4rc1 and 6.4 and 6.4.1 - 6.4.2 and 7.0rc1 and 7.0 and 7.0.1 - 7.0.8 and 7.1 and 7.1.1 - 7.1.3 and 7.2rc1 and 7.2 and 7.2.1 - 7.2.3 and 7.3rc1 and 7.3 and 7.3.1 - 7.3.3 and 7.4 and 7.4.1 - 7.4.2 and 8.0rc1
0.1 and 0.2 and 0.3 and 0.3.1 and 0.4 and 0.4.1 and 0.5 and 0.6 and 0.7 and 0.8 and 0.8.1 - 0.8.10 and 1.0b1 and 1.0b2 and 1.0rc1 and 1.0rc2 and 1.0 and 1.1rc1 and 1.1 and 1.2rc1 and 1.2 and 1.3rc1 and 1.3 and 1.3.1 and 1.4rc1 and 1.4 and 1.4.1 - 1.4.6 and 1.5rc1 and 1.5 and 1.5.1 - 1.5.3 and 1.6rc1 and 1.6 and 1.6.1 - 1.6.3 and 1.7rc1 and 1.7 and 1.8rc1 and 1.8 and 1.8.1 - 1.8.2 and 1.9rc1 and 1.9 and 1.9.1 and 1.10rc1 and 1.10 and 1.10.1 and 1.11rc1 and 1.11 and 1.11.1 and 1.12rc1 and 1.12 and 1.12.1 - 1.12.6 and 1.13rc1 and 1.13 and 1.13.1 - 1.13.4 and 2.0b1 and 2.0rc1 and 2.0 and 2.0.1 - 2.0.2 and 2.1rc1 and 2.1rc2 and 2.1 and 2.1.1 - 2.1.3 and 2.2rc1 and 2.2rc2 and 2.2 and 2.2.1 - 2.2.2 and 2.3rc1 and 2.3rc2 and 2.3 and 2.4rc1 and 2.4 and 2.5rc1 and 2.5 and 2.5.1 - 2.5.2 and 2.6rc1 and 2.6 and 2.6.1 - 2.6.3 and 2.7rc1 and 2.7rc2 and 2.7 and 2.7.1 - 2.7.4 and 2.8rc1 and 2.8 and 2.8.1 - 2.8.2 and 2.9rc1 and 2.9 and 2.9.1 - 2.9.3 and 2.10rc1 and 2.10rc2 and 2.10 and 2.10.1 - 2.10.2 and 2.11rc1 and 2.11 and 2.11.1 - 2.11.9 and 2.12rc1 and 2.12 and 2.12.1 - 2.12.6 and 2.13rc1 and 2.13rc2 and 2.13rc3 and 2.13 and 2.13.1 - 2.13.5 and 2.14rc1 and 2.14 and 2.14.1 - 2.14.2 and 2.15rc1 and 2.15rc2 and 2.15 and 2.15.1 - 2.15.6 and 2.16rc1 and 2.16rc2 and 2.16 and 2.16.1 - 2.16.3 and 3.0rc1 and 3.0rc2 and 3.0rc3 and 3.0 and 3.0.1 - 3.0.3 and 4.0rc1 and 4.0rc2 and 4.0 and 4.0.1 - 4.0.4 and 4.1rc1 and 4.1 and 4.1.1 - 4.1.9 and 4.2rc1 and 4.2 and 4.2.1 - 4.2.4 and 5.0rc1 and 5.0 and 5.0.1 - 5.0.5 and 5.1rc1 and 5.1 and 5.1.1 - 5.1.3 and 5.2rc1 and 5.2 and 5.2.1 - 5.2.8 and 6.0rc1 and 6.0 and 6.0.1 - 6.0.6 and 6.1rc1 and 6.1rc2 and 6.1 and 6.1.1 - 6.1.3 and 6.2rc1 and 6.2 and 6.2.1 - 6.2.4 and 6.3rc1 and 6.3rc2 and 6.3 and 6.3.1 - 6.3.8 and 6.4rc1 and 6.4 and 6.4.1 - 6.4.2 and 7.0rc1 and 7.0 and 7.0.1 - 7.0.8 and 7.1 and 7.1.1 - 7.1.3 and 7.2rc1 and 7.2 and 7.2.1 - 7.2.3 and 7.3rc1 and 7.3 and 7.3.1 - 7.3.3 and 7.4 and 7.4.1 - 7.4.2 and 8.0rc1
Summary
Wagtail: Improper permission handling when copying snippets
Details
Impact
A CMS user with "add" permission over a snippet model, but not "change" or "view" permission, could copy an existing snippet that they do not have access to, allowing them to view its contents.
Patches
Patched versions have been released as Wagtail 7.0.9, 7.3.4, 7.4.3 and 8.0rc2.
Workarounds
N/A
Acknowledgements
Many thanks to tinyb0y for reporting this issue.
For more information
If you have any questions or comments about this advisory:
- Visit Wagtail's support channels
- Email us at [email protected] (view our security policy for more information).
References
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Medium Risk
2 months ago
Wagtail: Improper restriction handling on Pages admin API
0.1 and 0.2 and 0.3 and 0.3.1 and 0.4 and 0.4.1 and 0.5 and 0.6 and 0.7 and 0.8 and 0.8.1 - 0.8.10 and 1.0b1 and 1.0b2 and 1.0rc1 and 1.0rc2 and 1.0 and 1.1rc1 and 1.1 and 1.2rc1 and 1.2 and 1.3rc1 and 1.3 and 1.3.1 and 1.4rc1 and 1.4 and 1.4.1 - 1.4.6 and 1.5rc1 and 1.5 and 1.5.1 - 1.5.3 and 1.6rc1 and 1.6 and 1.6.1 - 1.6.3 and 1.7rc1 and 1.7 and 1.8rc1 and 1.8 and 1.8.1 - 1.8.2 and 1.9rc1 and 1.9 and 1.9.1 and 1.10rc1 and 1.10 and 1.10.1 and 1.11rc1 and 1.11 and 1.11.1 and 1.12rc1 and 1.12 and 1.12.1 - 1.12.6 and 1.13rc1 and 1.13 and 1.13.1 - 1.13.4 and 2.0b1 and 2.0rc1 and 2.0 and 2.0.1 - 2.0.2 and 2.1rc1 and 2.1rc2 and 2.1 and 2.1.1 - 2.1.3 and 2.2rc1 and 2.2rc2 and 2.2 and 2.2.1 - 2.2.2 and 2.3rc1 and 2.3rc2 and 2.3 and 2.4rc1 and 2.4 and 2.5rc1 and 2.5 and 2.5.1 - 2.5.2 and 2.6rc1 and 2.6 and 2.6.1 - 2.6.3 and 2.7rc1 and 2.7rc2 and 2.7 and 2.7.1 - 2.7.4 and 2.8rc1 and 2.8 and 2.8.1 - 2.8.2 and 2.9rc1 and 2.9 and 2.9.1 - 2.9.3 and 2.10rc1 and 2.10rc2 and 2.10 and 2.10.1 - 2.10.2 and 2.11rc1 and 2.11 and 2.11.1 - 2.11.9 and 2.12rc1 and 2.12 and 2.12.1 - 2.12.6 and 2.13rc1 and 2.13rc2 and 2.13rc3 and 2.13 and 2.13.1 - 2.13.5 and 2.14rc1 and 2.14 and 2.14.1 - 2.14.2 and 2.15rc1 and 2.15rc2 and 2.15 and 2.15.1 - 2.15.6 and 2.16rc1 and 2.16rc2 and 2.16 and 2.16.1 - 2.16.3 and 3.0rc1 and 3.0rc2 and 3.0rc3 and 3.0 and 3.0.1 - 3.0.3 and 4.0rc1 and 4.0rc2 and 4.0 and 4.0.1 - 4.0.4 and 4.1rc1 and 4.1 and 4.1.1 - 4.1.9 and 4.2rc1 and 4.2 and 4.2.1 - 4.2.4 and 5.0rc1 and 5.0 and 5.0.1 - 5.0.5 and 5.1rc1 and 5.1 and 5.1.1 - 5.1.3 and 5.2rc1 and 5.2 and 5.2.1 - 5.2.8 and 6.0rc1 and 6.0 and 6.0.1 - 6.0.6 and 6.1rc1 and 6.1rc2 and 6.1 and 6.1.1 - 6.1.3 and 6.2rc1 and 6.2 and 6.2.1 - 6.2.4 and 6.3rc1 and 6.3rc2 and 6.3 and 6.3.1 - 6.3.8 and 6.4rc1 and 6.4 and 6.4.1 - 6.4.2 and 7.0rc1 and 7.0 and 7.0.1 - 7.0.8 and 7.1 and 7.1.1 - 7.1.3 and 7.2rc1 and 7.2 and 7.2.1 - 7.2.3 and 7.3rc1 and 7.3 and 7.3.1 - 7.3.3 and 7.4 and 7.4.1 - 7.4.2 and 8.0rc1 PYSEC-2026-3939
0.1 and 0.2 and 0.3 and 0.3.1 and 0.4 and 0.4.1 and 0.5 and 0.6 and 0.7 and 0.8 and 0.8.1 - 0.8.10 and 1.0b1 and 1.0b2 and 1.0rc1 and 1.0rc2 and 1.0 and 1.1rc1 and 1.1 and 1.2rc1 and 1.2 and 1.3rc1 and 1.3 and 1.3.1 and 1.4rc1 and 1.4 and 1.4.1 - 1.4.6 and 1.5rc1 and 1.5 and 1.5.1 - 1.5.3 and 1.6rc1 and 1.6 and 1.6.1 - 1.6.3 and 1.7rc1 and 1.7 and 1.8rc1 and 1.8 and 1.8.1 - 1.8.2 and 1.9rc1 and 1.9 and 1.9.1 and 1.10rc1 and 1.10 and 1.10.1 and 1.11rc1 and 1.11 and 1.11.1 and 1.12rc1 and 1.12 and 1.12.1 - 1.12.6 and 1.13rc1 and 1.13 and 1.13.1 - 1.13.4 and 2.0b1 and 2.0rc1 and 2.0 and 2.0.1 - 2.0.2 and 2.1rc1 and 2.1rc2 and 2.1 and 2.1.1 - 2.1.3 and 2.2rc1 and 2.2rc2 and 2.2 and 2.2.1 - 2.2.2 and 2.3rc1 and 2.3rc2 and 2.3 and 2.4rc1 and 2.4 and 2.5rc1 and 2.5 and 2.5.1 - 2.5.2 and 2.6rc1 and 2.6 and 2.6.1 - 2.6.3 and 2.7rc1 and 2.7rc2 and 2.7 and 2.7.1 - 2.7.4 and 2.8rc1 and 2.8 and 2.8.1 - 2.8.2 and 2.9rc1 and 2.9 and 2.9.1 - 2.9.3 and 2.10rc1 and 2.10rc2 and 2.10 and 2.10.1 - 2.10.2 and 2.11rc1 and 2.11 and 2.11.1 - 2.11.9 and 2.12rc1 and 2.12 and 2.12.1 - 2.12.6 and 2.13rc1 and 2.13rc2 and 2.13rc3 and 2.13 and 2.13.1 - 2.13.5 and 2.14rc1 and 2.14 and 2.14.1 - 2.14.2 and 2.15rc1 and 2.15rc2 and 2.15 and 2.15.1 - 2.15.6 and 2.16rc1 and 2.16rc2 and 2.16 and 2.16.1 - 2.16.3 and 3.0rc1 and 3.0rc2 and 3.0rc3 and 3.0 and 3.0.1 - 3.0.3 and 4.0rc1 and 4.0rc2 and 4.0 and 4.0.1 - 4.0.4 and 4.1rc1 and 4.1 and 4.1.1 - 4.1.9 and 4.2rc1 and 4.2 and 4.2.1 - 4.2.4 and 5.0rc1 and 5.0 and 5.0.1 - 5.0.5 and 5.1rc1 and 5.1 and 5.1.1 - 5.1.3 and 5.2rc1 and 5.2 and 5.2.1 - 5.2.8 and 6.0rc1 and 6.0 and 6.0.1 - 6.0.6 and 6.1rc1 and 6.1rc2 and 6.1 and 6.1.1 - 6.1.3 and 6.2rc1 and 6.2 and 6.2.1 - 6.2.4 and 6.3rc1 and 6.3rc2 and 6.3 and 6.3.1 - 6.3.8 and 6.4rc1 and 6.4 and 6.4.1 - 6.4.2 and 7.0rc1 and 7.0 and 7.0.1 - 7.0.8 and 7.1 and 7.1.1 - 7.1.3 and 7.2rc1 and 7.2 and 7.2.1 - 7.2.3 and 7.3rc1 and 7.3 and 7.3.1 - 7.3.3 and 7.4 and 7.4.1 - 7.4.2 and 8.0rc1 PYSEC-2026-3939
Medium Risk
2 months ago
Wagtail: Improper restriction handling on Page translation API endpoint
0.1 and 0.2 and 0.3 and 0.3.1 and 0.4 and 0.4.1 and 0.5 and 0.6 and 0.7 and 0.8 and 0.8.1 - 0.8.10 and 1.0b1 and 1.0b2 and 1.0rc1 and 1.0rc2 and 1.0 and 1.1rc1 and 1.1 and 1.2rc1 and 1.2 and 1.3rc1 and 1.3 and 1.3.1 and 1.4rc1 and 1.4 and 1.4.1 - 1.4.6 and 1.5rc1 and 1.5 and 1.5.1 - 1.5.3 and 1.6rc1 and 1.6 and 1.6.1 - 1.6.3 and 1.7rc1 and 1.7 and 1.8rc1 and 1.8 and 1.8.1 - 1.8.2 and 1.9rc1 and 1.9 and 1.9.1 and 1.10rc1 and 1.10 and 1.10.1 and 1.11rc1 and 1.11 and 1.11.1 and 1.12rc1 and 1.12 and 1.12.1 - 1.12.6 and 1.13rc1 and 1.13 and 1.13.1 - 1.13.4 and 2.0b1 and 2.0rc1 and 2.0 and 2.0.1 - 2.0.2 and 2.1rc1 and 2.1rc2 and 2.1 and 2.1.1 - 2.1.3 and 2.2rc1 and 2.2rc2 and 2.2 and 2.2.1 - 2.2.2 and 2.3rc1 and 2.3rc2 and 2.3 and 2.4rc1 and 2.4 and 2.5rc1 and 2.5 and 2.5.1 - 2.5.2 and 2.6rc1 and 2.6 and 2.6.1 - 2.6.3 and 2.7rc1 and 2.7rc2 and 2.7 and 2.7.1 - 2.7.4 and 2.8rc1 and 2.8 and 2.8.1 - 2.8.2 and 2.9rc1 and 2.9 and 2.9.1 - 2.9.3 and 2.10rc1 and 2.10rc2 and 2.10 and 2.10.1 - 2.10.2 and 2.11rc1 and 2.11 and 2.11.1 - 2.11.9 and 2.12rc1 and 2.12 and 2.12.1 - 2.12.6 and 2.13rc1 and 2.13rc2 and 2.13rc3 and 2.13 and 2.13.1 - 2.13.5 and 2.14rc1 and 2.14 and 2.14.1 - 2.14.2 and 2.15rc1 and 2.15rc2 and 2.15 and 2.15.1 - 2.15.6 and 2.16rc1 and 2.16rc2 and 2.16 and 2.16.1 - 2.16.3 and 3.0rc1 and 3.0rc2 and 3.0rc3 and 3.0 and 3.0.1 - 3.0.3 and 4.0rc1 and 4.0rc2 and 4.0 and 4.0.1 - 4.0.4 and 4.1rc1 and 4.1 and 4.1.1 - 4.1.9 and 4.2rc1 and 4.2 and 4.2.1 - 4.2.4 and 5.0rc1 and 5.0 and 5.0.1 - 5.0.5 and 5.1rc1 and 5.1 and 5.1.1 - 5.1.3 and 5.2rc1 and 5.2 and 5.2.1 - 5.2.8 and 6.0rc1 and 6.0 and 6.0.1 - 6.0.6 and 6.1rc1 and 6.1rc2 and 6.1 and 6.1.1 - 6.1.3 and 6.2rc1 and 6.2 and 6.2.1 - 6.2.4 and 6.3rc1 and 6.3rc2 and 6.3 and 6.3.1 - 6.3.8 and 6.4rc1 and 6.4 and 6.4.1 - 6.4.2 and 7.0rc1 and 7.0 and 7.0.1 - 7.0.8 and 7.1rc1 and 7.1 and 7.1.1 - 7.1.3 and 7.2rc1 and 7.2 and 7.2.1 - 7.2.3 and 7.3rc1 and 7.3 and 7.3.1 - 7.3.3 and 7.4rc1 and 7.4 and 7.4.1 - 7.4.2 and 8.0rc1 GHSA-jm5p-837g-rv8g
0.1 and 0.2 and 0.3 and 0.3.1 and 0.4 and 0.4.1 and 0.5 and 0.6 and 0.7 and 0.8 and 0.8.1 - 0.8.10 and 1.0b1 and 1.0b2 and 1.0rc1 and 1.0rc2 and 1.0 and 1.1rc1 and 1.1 and 1.2rc1 and 1.2 and 1.3rc1 and 1.3 and 1.3.1 and 1.4rc1 and 1.4 and 1.4.1 - 1.4.6 and 1.5rc1 and 1.5 and 1.5.1 - 1.5.3 and 1.6rc1 and 1.6 and 1.6.1 - 1.6.3 and 1.7rc1 and 1.7 and 1.8rc1 and 1.8 and 1.8.1 - 1.8.2 and 1.9rc1 and 1.9 and 1.9.1 and 1.10rc1 and 1.10 and 1.10.1 and 1.11rc1 and 1.11 and 1.11.1 and 1.12rc1 and 1.12 and 1.12.1 - 1.12.6 and 1.13rc1 and 1.13 and 1.13.1 - 1.13.4 and 2.0b1 and 2.0rc1 and 2.0 and 2.0.1 - 2.0.2 and 2.1rc1 and 2.1rc2 and 2.1 and 2.1.1 - 2.1.3 and 2.2rc1 and 2.2rc2 and 2.2 and 2.2.1 - 2.2.2 and 2.3rc1 and 2.3rc2 and 2.3 and 2.4rc1 and 2.4 and 2.5rc1 and 2.5 and 2.5.1 - 2.5.2 and 2.6rc1 and 2.6 and 2.6.1 - 2.6.3 and 2.7rc1 and 2.7rc2 and 2.7 and 2.7.1 - 2.7.4 and 2.8rc1 and 2.8 and 2.8.1 - 2.8.2 and 2.9rc1 and 2.9 and 2.9.1 - 2.9.3 and 2.10rc1 and 2.10rc2 and 2.10 and 2.10.1 - 2.10.2 and 2.11rc1 and 2.11 and 2.11.1 - 2.11.9 and 2.12rc1 and 2.12 and 2.12.1 - 2.12.6 and 2.13rc1 and 2.13rc2 and 2.13rc3 and 2.13 and 2.13.1 - 2.13.5 and 2.14rc1 and 2.14 and 2.14.1 - 2.14.2 and 2.15rc1 and 2.15rc2 and 2.15 and 2.15.1 - 2.15.6 and 2.16rc1 and 2.16rc2 and 2.16 and 2.16.1 - 2.16.3 and 3.0rc1 and 3.0rc2 and 3.0rc3 and 3.0 and 3.0.1 - 3.0.3 and 4.0rc1 and 4.0rc2 and 4.0 and 4.0.1 - 4.0.4 and 4.1rc1 and 4.1 and 4.1.1 - 4.1.9 and 4.2rc1 and 4.2 and 4.2.1 - 4.2.4 and 5.0rc1 and 5.0 and 5.0.1 - 5.0.5 and 5.1rc1 and 5.1 and 5.1.1 - 5.1.3 and 5.2rc1 and 5.2 and 5.2.1 - 5.2.8 and 6.0rc1 and 6.0 and 6.0.1 - 6.0.6 and 6.1rc1 and 6.1rc2 and 6.1 and 6.1.1 - 6.1.3 and 6.2rc1 and 6.2 and 6.2.1 - 6.2.4 and 6.3rc1 and 6.3rc2 and 6.3 and 6.3.1 - 6.3.8 and 6.4rc1 and 6.4 and 6.4.1 - 6.4.2 and 7.0rc1 and 7.0 and 7.0.1 - 7.0.8 and 7.1rc1 and 7.1 and 7.1.1 - 7.1.3 and 7.2rc1 and 7.2 and 7.2.1 - 7.2.3 and 7.3rc1 and 7.3 and 7.3.1 - 7.3.3 and 7.4rc1 and 7.4 and 7.4.1 - 7.4.2 and 8.0rc1 GHSA-jm5p-837g-rv8g
Medium Risk
2 months ago
Wagtail: Improper restriction handling on descendant collections in Documents and Images API
0.1 and 0.2 and 0.3 and 0.3.1 and 0.4 and 0.4.1 and 0.5 and 0.6 and 0.7 and 0.8 and 0.8.1 - 0.8.10 and 1.0b1 and 1.0b2 and 1.0rc1 and 1.0rc2 and 1.0 and 1.1rc1 and 1.1 and 1.2rc1 and 1.2 and 1.3rc1 and 1.3 and 1.3.1 and 1.4rc1 and 1.4 and 1.4.1 - 1.4.6 and 1.5rc1 and 1.5 and 1.5.1 - 1.5.3 and 1.6rc1 and 1.6 and 1.6.1 - 1.6.3 and 1.7rc1 and 1.7 and 1.8rc1 and 1.8 and 1.8.1 - 1.8.2 and 1.9rc1 and 1.9 and 1.9.1 and 1.10rc1 and 1.10 and 1.10.1 and 1.11rc1 and 1.11 and 1.11.1 and 1.12rc1 and 1.12 and 1.12.1 - 1.12.6 and 1.13rc1 and 1.13 and 1.13.1 - 1.13.4 and 2.0b1 and 2.0rc1 and 2.0 and 2.0.1 - 2.0.2 and 2.1rc1 and 2.1rc2 and 2.1 and 2.1.1 - 2.1.3 and 2.2rc1 and 2.2rc2 and 2.2 and 2.2.1 - 2.2.2 and 2.3rc1 and 2.3rc2 and 2.3 and 2.4rc1 and 2.4 and 2.5rc1 and 2.5 and 2.5.1 - 2.5.2 and 2.6rc1 and 2.6 and 2.6.1 - 2.6.3 and 2.7rc1 and 2.7rc2 and 2.7 and 2.7.1 - 2.7.4 and 2.8rc1 and 2.8 and 2.8.1 - 2.8.2 and 2.9rc1 and 2.9 and 2.9.1 - 2.9.3 and 2.10rc1 and 2.10rc2 and 2.10 and 2.10.1 - 2.10.2 and 2.11rc1 and 2.11 and 2.11.1 - 2.11.9 and 2.12rc1 and 2.12 and 2.12.1 - 2.12.6 and 2.13rc1 and 2.13rc2 and 2.13rc3 and 2.13 and 2.13.1 - 2.13.5 and 2.14rc1 and 2.14 and 2.14.1 - 2.14.2 and 2.15rc1 and 2.15rc2 and 2.15 and 2.15.1 - 2.15.6 and 2.16rc1 and 2.16rc2 and 2.16 and 2.16.1 - 2.16.3 and 3.0rc1 and 3.0rc2 and 3.0rc3 and 3.0 and 3.0.1 - 3.0.3 and 4.0rc1 and 4.0rc2 and 4.0 and 4.0.1 - 4.0.4 and 4.1rc1 and 4.1 and 4.1.1 - 4.1.9 and 4.2rc1 and 4.2 and 4.2.1 - 4.2.4 and 5.0rc1 and 5.0 and 5.0.1 - 5.0.5 and 5.1rc1 and 5.1 and 5.1.1 - 5.1.3 and 5.2rc1 and 5.2 and 5.2.1 - 5.2.8 and 6.0rc1 and 6.0 and 6.0.1 - 6.0.6 and 6.1rc1 and 6.1rc2 and 6.1 and 6.1.1 - 6.1.3 and 6.2rc1 and 6.2 and 6.2.1 - 6.2.4 and 6.3rc1 and 6.3rc2 and 6.3 and 6.3.1 - 6.3.8 and 6.4rc1 and 6.4 and 6.4.1 - 6.4.2 and 7.0rc1 and 7.0 and 7.0.1 - 7.0.8 and 7.1 and 7.1.1 - 7.1.3 and 7.2rc1 and 7.2 and 7.2.1 - 7.2.3 and 7.3rc1 and 7.3 and 7.3.1 - 7.3.3 and 7.4 and 7.4.1 - 7.4.2 and 8.0rc1 GHSA-c2xx-cjmh-9q8f
0.1 and 0.2 and 0.3 and 0.3.1 and 0.4 and 0.4.1 and 0.5 and 0.6 and 0.7 and 0.8 and 0.8.1 - 0.8.10 and 1.0b1 and 1.0b2 and 1.0rc1 and 1.0rc2 and 1.0 and 1.1rc1 and 1.1 and 1.2rc1 and 1.2 and 1.3rc1 and 1.3 and 1.3.1 and 1.4rc1 and 1.4 and 1.4.1 - 1.4.6 and 1.5rc1 and 1.5 and 1.5.1 - 1.5.3 and 1.6rc1 and 1.6 and 1.6.1 - 1.6.3 and 1.7rc1 and 1.7 and 1.8rc1 and 1.8 and 1.8.1 - 1.8.2 and 1.9rc1 and 1.9 and 1.9.1 and 1.10rc1 and 1.10 and 1.10.1 and 1.11rc1 and 1.11 and 1.11.1 and 1.12rc1 and 1.12 and 1.12.1 - 1.12.6 and 1.13rc1 and 1.13 and 1.13.1 - 1.13.4 and 2.0b1 and 2.0rc1 and 2.0 and 2.0.1 - 2.0.2 and 2.1rc1 and 2.1rc2 and 2.1 and 2.1.1 - 2.1.3 and 2.2rc1 and 2.2rc2 and 2.2 and 2.2.1 - 2.2.2 and 2.3rc1 and 2.3rc2 and 2.3 and 2.4rc1 and 2.4 and 2.5rc1 and 2.5 and 2.5.1 - 2.5.2 and 2.6rc1 and 2.6 and 2.6.1 - 2.6.3 and 2.7rc1 and 2.7rc2 and 2.7 and 2.7.1 - 2.7.4 and 2.8rc1 and 2.8 and 2.8.1 - 2.8.2 and 2.9rc1 and 2.9 and 2.9.1 - 2.9.3 and 2.10rc1 and 2.10rc2 and 2.10 and 2.10.1 - 2.10.2 and 2.11rc1 and 2.11 and 2.11.1 - 2.11.9 and 2.12rc1 and 2.12 and 2.12.1 - 2.12.6 and 2.13rc1 and 2.13rc2 and 2.13rc3 and 2.13 and 2.13.1 - 2.13.5 and 2.14rc1 and 2.14 and 2.14.1 - 2.14.2 and 2.15rc1 and 2.15rc2 and 2.15 and 2.15.1 - 2.15.6 and 2.16rc1 and 2.16rc2 and 2.16 and 2.16.1 - 2.16.3 and 3.0rc1 and 3.0rc2 and 3.0rc3 and 3.0 and 3.0.1 - 3.0.3 and 4.0rc1 and 4.0rc2 and 4.0 and 4.0.1 - 4.0.4 and 4.1rc1 and 4.1 and 4.1.1 - 4.1.9 and 4.2rc1 and 4.2 and 4.2.1 - 4.2.4 and 5.0rc1 and 5.0 and 5.0.1 - 5.0.5 and 5.1rc1 and 5.1 and 5.1.1 - 5.1.3 and 5.2rc1 and 5.2 and 5.2.1 - 5.2.8 and 6.0rc1 and 6.0 and 6.0.1 - 6.0.6 and 6.1rc1 and 6.1rc2 and 6.1 and 6.1.1 - 6.1.3 and 6.2rc1 and 6.2 and 6.2.1 - 6.2.4 and 6.3rc1 and 6.3rc2 and 6.3 and 6.3.1 - 6.3.8 and 6.4rc1 and 6.4 and 6.4.1 - 6.4.2 and 7.0rc1 and 7.0 and 7.0.1 - 7.0.8 and 7.1 and 7.1.1 - 7.1.3 and 7.2rc1 and 7.2 and 7.2.1 - 7.2.3 and 7.3rc1 and 7.3 and 7.3.1 - 7.3.3 and 7.4 and 7.4.1 - 7.4.2 and 8.0rc1 GHSA-c2xx-cjmh-9q8f
Low Risk
2 months ago
Wagtail: Identification of documents by SHA1 hash
0.1 and 0.2 and 0.3 and 0.3.1 and 0.4 and 0.4.1 and 0.5 and 0.6 and 0.7 and 0.8 and 0.8.1 - 0.8.10 and 1.0b1 and 1.0b2 and 1.0rc1 and 1.0rc2 and 1.0 and 1.1rc1 and 1.1 and 1.2rc1 and 1.2 and 1.3rc1 and 1.3 and 1.3.1 and 1.4rc1 and 1.4 and 1.4.1 - 1.4.6 and 1.5rc1 and 1.5 and 1.5.1 - 1.5.3 and 1.6rc1 and 1.6 and 1.6.1 - 1.6.3 and 1.7rc1 and 1.7 and 1.8rc1 and 1.8 and 1.8.1 - 1.8.2 and 1.9rc1 and 1.9 and 1.9.1 and 1.10rc1 and 1.10 and 1.10.1 and 1.11rc1 and 1.11 and 1.11.1 and 1.12rc1 and 1.12 and 1.12.1 - 1.12.6 and 1.13rc1 and 1.13 and 1.13.1 - 1.13.4 and 2.0b1 and 2.0rc1 and 2.0 and 2.0.1 - 2.0.2 and 2.1rc1 and 2.1rc2 and 2.1 and 2.1.1 - 2.1.3 and 2.2rc1 and 2.2rc2 and 2.2 and 2.2.1 - 2.2.2 and 2.3rc1 and 2.3rc2 and 2.3 and 2.4rc1 and 2.4 and 2.5rc1 and 2.5 and 2.5.1 - 2.5.2 and 2.6rc1 and 2.6 and 2.6.1 - 2.6.3 and 2.7rc1 and 2.7rc2 and 2.7 and 2.7.1 - 2.7.4 and 2.8rc1 and 2.8 and 2.8.1 - 2.8.2 and 2.9rc1 and 2.9 and 2.9.1 - 2.9.3 and 2.10rc1 and 2.10rc2 and 2.10 and 2.10.1 - 2.10.2 and 2.11rc1 and 2.11 and 2.11.1 - 2.11.9 and 2.12rc1 and 2.12 and 2.12.1 - 2.12.6 and 2.13rc1 and 2.13rc2 and 2.13rc3 and 2.13 and 2.13.1 - 2.13.5 and 2.14rc1 and 2.14 and 2.14.1 - 2.14.2 and 2.15rc1 and 2.15rc2 and 2.15 and 2.15.1 - 2.15.6 and 2.16rc1 and 2.16rc2 and 2.16 and 2.16.1 - 2.16.3 and 3.0rc1 and 3.0rc2 and 3.0rc3 and 3.0 and 3.0.1 - 3.0.3 and 4.0rc1 and 4.0rc2 and 4.0 and 4.0.1 - 4.0.4 and 4.1rc1 and 4.1 and 4.1.1 - 4.1.9 and 4.2rc1 and 4.2 and 4.2.1 - 4.2.4 and 5.0rc1 and 5.0 and 5.0.1 - 5.0.5 and 5.1rc1 and 5.1 and 5.1.1 - 5.1.3 and 5.2rc1 and 5.2 and 5.2.1 - 5.2.8 and 6.0rc1 and 6.0 and 6.0.1 - 6.0.6 and 6.1rc1 and 6.1rc2 and 6.1 and 6.1.1 - 6.1.3 and 6.2rc1 and 6.2 and 6.2.1 - 6.2.4 and 6.3rc1 and 6.3rc2 and 6.3 and 6.3.1 - 6.3.8 and 6.4rc1 and 6.4 and 6.4.1 - 6.4.2 and 7.0rc1 and 7.0 and 7.0.1 - 7.0.8 and 7.1 and 7.1.1 - 7.1.3 and 7.2rc1 and 7.2 and 7.2.1 - 7.2.3 and 7.3rc1 and 7.3 and 7.3.1 - 7.3.3 and 7.4 and 7.4.1 - 7.4.2 and 8.0rc1 GHSA-92hv-j533-69wc
0.1 and 0.2 and 0.3 and 0.3.1 and 0.4 and 0.4.1 and 0.5 and 0.6 and 0.7 and 0.8 and 0.8.1 - 0.8.10 and 1.0b1 and 1.0b2 and 1.0rc1 and 1.0rc2 and 1.0 and 1.1rc1 and 1.1 and 1.2rc1 and 1.2 and 1.3rc1 and 1.3 and 1.3.1 and 1.4rc1 and 1.4 and 1.4.1 - 1.4.6 and 1.5rc1 and 1.5 and 1.5.1 - 1.5.3 and 1.6rc1 and 1.6 and 1.6.1 - 1.6.3 and 1.7rc1 and 1.7 and 1.8rc1 and 1.8 and 1.8.1 - 1.8.2 and 1.9rc1 and 1.9 and 1.9.1 and 1.10rc1 and 1.10 and 1.10.1 and 1.11rc1 and 1.11 and 1.11.1 and 1.12rc1 and 1.12 and 1.12.1 - 1.12.6 and 1.13rc1 and 1.13 and 1.13.1 - 1.13.4 and 2.0b1 and 2.0rc1 and 2.0 and 2.0.1 - 2.0.2 and 2.1rc1 and 2.1rc2 and 2.1 and 2.1.1 - 2.1.3 and 2.2rc1 and 2.2rc2 and 2.2 and 2.2.1 - 2.2.2 and 2.3rc1 and 2.3rc2 and 2.3 and 2.4rc1 and 2.4 and 2.5rc1 and 2.5 and 2.5.1 - 2.5.2 and 2.6rc1 and 2.6 and 2.6.1 - 2.6.3 and 2.7rc1 and 2.7rc2 and 2.7 and 2.7.1 - 2.7.4 and 2.8rc1 and 2.8 and 2.8.1 - 2.8.2 and 2.9rc1 and 2.9 and 2.9.1 - 2.9.3 and 2.10rc1 and 2.10rc2 and 2.10 and 2.10.1 - 2.10.2 and 2.11rc1 and 2.11 and 2.11.1 - 2.11.9 and 2.12rc1 and 2.12 and 2.12.1 - 2.12.6 and 2.13rc1 and 2.13rc2 and 2.13rc3 and 2.13 and 2.13.1 - 2.13.5 and 2.14rc1 and 2.14 and 2.14.1 - 2.14.2 and 2.15rc1 and 2.15rc2 and 2.15 and 2.15.1 - 2.15.6 and 2.16rc1 and 2.16rc2 and 2.16 and 2.16.1 - 2.16.3 and 3.0rc1 and 3.0rc2 and 3.0rc3 and 3.0 and 3.0.1 - 3.0.3 and 4.0rc1 and 4.0rc2 and 4.0 and 4.0.1 - 4.0.4 and 4.1rc1 and 4.1 and 4.1.1 - 4.1.9 and 4.2rc1 and 4.2 and 4.2.1 - 4.2.4 and 5.0rc1 and 5.0 and 5.0.1 - 5.0.5 and 5.1rc1 and 5.1 and 5.1.1 - 5.1.3 and 5.2rc1 and 5.2 and 5.2.1 - 5.2.8 and 6.0rc1 and 6.0 and 6.0.1 - 6.0.6 and 6.1rc1 and 6.1rc2 and 6.1 and 6.1.1 - 6.1.3 and 6.2rc1 and 6.2 and 6.2.1 - 6.2.4 and 6.3rc1 and 6.3rc2 and 6.3 and 6.3.1 - 6.3.8 and 6.4rc1 and 6.4 and 6.4.1 - 6.4.2 and 7.0rc1 and 7.0 and 7.0.1 - 7.0.8 and 7.1 and 7.1.1 - 7.1.3 and 7.2rc1 and 7.2 and 7.2.1 - 7.2.3 and 7.3rc1 and 7.3 and 7.3.1 - 7.3.3 and 7.4 and 7.4.1 - 7.4.2 and 8.0rc1 GHSA-92hv-j533-69wc
Medium Risk
2 months ago
Wagtail: Improper restriction handling on Pages admin API
0.1 and 0.2 and 0.3 and 0.3.1 and 0.4 and 0.4.1 and 0.5 and 0.6 and 0.7 and 0.8 and 0.8.1 - 0.8.10 and 1.0b1 and 1.0b2 and 1.0rc1 and 1.0rc2 and 1.0 and 1.1rc1 and 1.1 and 1.2rc1 and 1.2 and 1.3rc1 and 1.3 and 1.3.1 and 1.4rc1 and 1.4 and 1.4.1 - 1.4.6 and 1.5rc1 and 1.5 and 1.5.1 - 1.5.3 and 1.6rc1 and 1.6 and 1.6.1 - 1.6.3 and 1.7rc1 and 1.7 and 1.8rc1 and 1.8 and 1.8.1 - 1.8.2 and 1.9rc1 and 1.9 and 1.9.1 and 1.10rc1 and 1.10 and 1.10.1 and 1.11rc1 and 1.11 and 1.11.1 and 1.12rc1 and 1.12 and 1.12.1 - 1.12.6 and 1.13rc1 and 1.13 and 1.13.1 - 1.13.4 and 2.0b1 and 2.0rc1 and 2.0 and 2.0.1 - 2.0.2 and 2.1rc1 and 2.1rc2 and 2.1 and 2.1.1 - 2.1.3 and 2.2rc1 and 2.2rc2 and 2.2 and 2.2.1 - 2.2.2 and 2.3rc1 and 2.3rc2 and 2.3 and 2.4rc1 and 2.4 and 2.5rc1 and 2.5 and 2.5.1 - 2.5.2 and 2.6rc1 and 2.6 and 2.6.1 - 2.6.3 and 2.7rc1 and 2.7rc2 and 2.7 and 2.7.1 - 2.7.4 and 2.8rc1 and 2.8 and 2.8.1 - 2.8.2 and 2.9rc1 and 2.9 and 2.9.1 - 2.9.3 and 2.10rc1 and 2.10rc2 and 2.10 and 2.10.1 - 2.10.2 and 2.11rc1 and 2.11 and 2.11.1 - 2.11.9 and 2.12rc1 and 2.12 and 2.12.1 - 2.12.6 and 2.13rc1 and 2.13rc2 and 2.13rc3 and 2.13 and 2.13.1 - 2.13.5 and 2.14rc1 and 2.14 and 2.14.1 - 2.14.2 and 2.15rc1 and 2.15rc2 and 2.15 and 2.15.1 - 2.15.6 and 2.16rc1 and 2.16rc2 and 2.16 and 2.16.1 - 2.16.3 and 3.0rc1 and 3.0rc2 and 3.0rc3 and 3.0 and 3.0.1 - 3.0.3 and 4.0rc1 and 4.0rc2 and 4.0 and 4.0.1 - 4.0.4 and 4.1rc1 and 4.1 and 4.1.1 - 4.1.9 and 4.2rc1 and 4.2 and 4.2.1 - 4.2.4 and 5.0rc1 and 5.0 and 5.0.1 - 5.0.5 and 5.1rc1 and 5.1 and 5.1.1 - 5.1.3 and 5.2rc1 and 5.2 and 5.2.1 - 5.2.8 and 6.0rc1 and 6.0 and 6.0.1 - 6.0.6 and 6.1rc1 and 6.1rc2 and 6.1 and 6.1.1 - 6.1.3 and 6.2rc1 and 6.2 and 6.2.1 - 6.2.4 and 6.3rc1 and 6.3rc2 and 6.3 and 6.3.1 - 6.3.8 and 6.4rc1 and 6.4 and 6.4.1 - 6.4.2 and 7.0rc1 and 7.0 and 7.0.1 - 7.0.8 and 7.1 and 7.1.1 - 7.1.3 and 7.2rc1 and 7.2 and 7.2.1 - 7.2.3 and 7.3rc1 and 7.3 and 7.3.1 - 7.3.3 and 7.4 and 7.4.1 - 7.4.2 and 8.0rc1 GHSA-3vrh-m9w7-v94f
0.1 and 0.2 and 0.3 and 0.3.1 and 0.4 and 0.4.1 and 0.5 and 0.6 and 0.7 and 0.8 and 0.8.1 - 0.8.10 and 1.0b1 and 1.0b2 and 1.0rc1 and 1.0rc2 and 1.0 and 1.1rc1 and 1.1 and 1.2rc1 and 1.2 and 1.3rc1 and 1.3 and 1.3.1 and 1.4rc1 and 1.4 and 1.4.1 - 1.4.6 and 1.5rc1 and 1.5 and 1.5.1 - 1.5.3 and 1.6rc1 and 1.6 and 1.6.1 - 1.6.3 and 1.7rc1 and 1.7 and 1.8rc1 and 1.8 and 1.8.1 - 1.8.2 and 1.9rc1 and 1.9 and 1.9.1 and 1.10rc1 and 1.10 and 1.10.1 and 1.11rc1 and 1.11 and 1.11.1 and 1.12rc1 and 1.12 and 1.12.1 - 1.12.6 and 1.13rc1 and 1.13 and 1.13.1 - 1.13.4 and 2.0b1 and 2.0rc1 and 2.0 and 2.0.1 - 2.0.2 and 2.1rc1 and 2.1rc2 and 2.1 and 2.1.1 - 2.1.3 and 2.2rc1 and 2.2rc2 and 2.2 and 2.2.1 - 2.2.2 and 2.3rc1 and 2.3rc2 and 2.3 and 2.4rc1 and 2.4 and 2.5rc1 and 2.5 and 2.5.1 - 2.5.2 and 2.6rc1 and 2.6 and 2.6.1 - 2.6.3 and 2.7rc1 and 2.7rc2 and 2.7 and 2.7.1 - 2.7.4 and 2.8rc1 and 2.8 and 2.8.1 - 2.8.2 and 2.9rc1 and 2.9 and 2.9.1 - 2.9.3 and 2.10rc1 and 2.10rc2 and 2.10 and 2.10.1 - 2.10.2 and 2.11rc1 and 2.11 and 2.11.1 - 2.11.9 and 2.12rc1 and 2.12 and 2.12.1 - 2.12.6 and 2.13rc1 and 2.13rc2 and 2.13rc3 and 2.13 and 2.13.1 - 2.13.5 and 2.14rc1 and 2.14 and 2.14.1 - 2.14.2 and 2.15rc1 and 2.15rc2 and 2.15 and 2.15.1 - 2.15.6 and 2.16rc1 and 2.16rc2 and 2.16 and 2.16.1 - 2.16.3 and 3.0rc1 and 3.0rc2 and 3.0rc3 and 3.0 and 3.0.1 - 3.0.3 and 4.0rc1 and 4.0rc2 and 4.0 and 4.0.1 - 4.0.4 and 4.1rc1 and 4.1 and 4.1.1 - 4.1.9 and 4.2rc1 and 4.2 and 4.2.1 - 4.2.4 and 5.0rc1 and 5.0 and 5.0.1 - 5.0.5 and 5.1rc1 and 5.1 and 5.1.1 - 5.1.3 and 5.2rc1 and 5.2 and 5.2.1 - 5.2.8 and 6.0rc1 and 6.0 and 6.0.1 - 6.0.6 and 6.1rc1 and 6.1rc2 and 6.1 and 6.1.1 - 6.1.3 and 6.2rc1 and 6.2 and 6.2.1 - 6.2.4 and 6.3rc1 and 6.3rc2 and 6.3 and 6.3.1 - 6.3.8 and 6.4rc1 and 6.4 and 6.4.1 - 6.4.2 and 7.0rc1 and 7.0 and 7.0.1 - 7.0.8 and 7.1 and 7.1.1 - 7.1.3 and 7.2rc1 and 7.2 and 7.2.1 - 7.2.3 and 7.3rc1 and 7.3 and 7.3.1 - 7.3.3 and 7.4 and 7.4.1 - 7.4.2 and 8.0rc1 GHSA-3vrh-m9w7-v94f
Impacted packages
Timeline
Published
2 months ago
August 20, 2026 at 06:45 PM UTC
Fixed (7.0.9)
2 months ago
August 20, 2026 at 03:27 PM UTC
Fixed (7.3.4)
2 months ago
August 20, 2026 at 03:28 PM UTC
Fixed (7.4.3)
2 months ago
August 20, 2026 at 03:28 PM UTC
Fixed (8.0rc2)
2 months ago
August 20, 2026 at 03:58 PM UTC
Last Modified
6 hours ago
November 09, 2026 at 09:45 PM UTC