Ckan vulnerabilities
We track 7 vulnerabilities in Ckan products across 2 products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on May 13, 2026.
Latest Ckan vulnerabilities
- 9.1 Critical severity
ckan: Incorrect Authorization
CKAN is an open-source DMS (data management system) for powering data hubs and data portals. Prior to 2.10.10 and 2.11.5, a vulnerability in datastore_search_sql allowed attackers to bypass authorization in order to gain access to private resources and Postgre
- 9.8 Critical severity
ckan: Improper Neutralization of Special Elements used in an SQL Command
CKAN is an open-source DMS (data management system) for powering data hubs and data portals. Prior to 2.10.10 and 2.11.5, a vulnerability in datastore_search_sql allowed attackers to inject SQL in order to gain access to private resources and PostgreSQL system
- 7.4 High severity
ckan: Improper Certificate Validation
CKAN is an open-source DMS (data management system) for powering data hubs and data portals. Prior to 2.10.10 and 2.11.5, the configured SMTP server may be spoofed with any certificate (e.g. self-signed), leaving credentials and all emails sent open to MITM at
- 7.3 High severity
ckan: Improper Neutralization of Input During Web Page Generation
CKAN is an open-source DMS (data management system) for powering data hubs and data portals. Using a specially crafted file, a user could potentially upload a file containing code that when executed could send arbitrary requests to the server. If that file was
- 8.8 High severity
ckan-docker-base: Improper Privilege Management
CKAN is an open-source data management system for powering data hubs and data portals. Prior to versions 2.9.9 and 2.10.1, the `ckan` user (equivalent to www-data) owned code and configuration files in the docker container and the `ckan` user had the permissio
- 9.8 Critical severity
CKAN is an open-source data management system for powering data hubs and data portals.
CKAN is an open-source data management system for powering data hubs and data portals. Multiple vulnerabilities have been discovered in Ckan which may lead to remote code execution. An arbitrary file write in `resource_create` and `package_update` actions, usi
- 7.5 High severity
ckan: Use of Insufficiently Random Values
CKAN is an open-source DMS (data management system) for powering data hubs and data portals. When creating a new container based on one of the Docker images listed below, the same secret key was being used by default. If the users didn't set a custom value via