Ecosyste.ms: OpenCollective

An open API service for software projects hosted on Open Collective.

github.com/wagtail/wagtail

A Django content management system focused on flexibility and user experience
https://github.com/wagtail/wagtail

High

GSA_kwCzR0hTQS1qbXAzLTM5dnAtZndnOM4AA9zm

Wagtail regular expression denial-of-service via search query parsing
Ecosystems: pypi
Packages: wagtail
Source: github
Published: 7 months ago

Moderate

GSA_kwCzR0hTQS14eGZtLXZtY2YtZzMzZs4AA8mP

Improper Handling of Insufficient Permissions in `wagtail.contrib.settings`
Ecosystems: pypi
Packages: wagtail
Source: github
Published: 8 months ago

Low

GSA_kwCzR0hTQS13MnY4LXBocDQtcDhoY84AA7eE

Wagtail has permission check bypass when editing a model with per-field restrictions through `wagtail.contrib.settings` or `ModelViewSet`
Ecosystems: pypi
Packages: wagtail
Source: github
Published: 9 months ago

Low

GSA_kwCzR0hTQS1mYzc1LTU4cjgtcm0zaM4AA2kA

Wagtail vulnerable to disclosure of user names via admin bulk action views
Ecosystems: pypi
Packages: wagtail
Source: github
Published: over 1 year ago

Moderate

GSA_kwCzR0hTQS0zM3B2LXZjZ2gtamZnOc4AAyg6

Wagtail vulnerable to denial-of-service via memory exhaustion when uploading large files
Ecosystems: pypi
Packages: wagtail
Source: github
Published: almost 2 years ago

High

GSA_kwCzR0hTQS01Mjg2LWYycmYtMzVjMs4AAygz

Wagtail vulnerable to stored Cross-site Scripting attack via ModelAdmin views
Ecosystems: pypi
Packages: wagtail
Source: github
Published: almost 2 years ago

Moderate

GSA_kwCzR0hTQS14cXhtLTJycG0tMzg4Oc0kJQ

Comment reply notifications sent to incorrect users
Ecosystems: pypi
Packages: wagtail
Source: github
Published: about 3 years ago

Moderate

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXhmcnctaHhyNS1naHFm

Cross-site Scripting in wagtail
Ecosystems: pypi
Packages: wagtail
Source: github
Published: over 3 years ago

High

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXdxNWgtZjlwNS1xN2Z4

Improper validation of URLs ('Cross-site Scripting') in Wagtail rich text fields
Ecosystems: pypi
Packages: wagtail
Source: github
Published: almost 4 years ago

High

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTI0NzMtOWhncS1qN3h3

Cross-Site Scripting in Wagtail
Ecosystems: pypi
Packages: wagtail
Source: github
Published: over 4 years ago

Moderate

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWpqanItM2pjdy1mOHY2

Potential Observable Timing Discrepancy in Wagtail
Ecosystems: pypi
Packages: wagtail
Source: github
Published: over 4 years ago

Moderate

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXYyd2MtcGZxMi01Y202

Possible XSS attack in Wagtail
Ecosystems: pypi
Packages: wagtail
Source: github
Published: almost 5 years ago