LMFDB vulnerabilities
We track 1 vulnerability in LMFDB products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 5, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest LMFDB vulnerabilities
- 9.8 Critical severity
LMFDB: Improper Neutralization of Special Elements Used in a Template Engine
LMFDB before commit 01829bd contains a server-side template injection vulnerability in the render_knowl function that allows unauthenticated attackers to inject Jinja expressions via request parameters. Attackers can supply crafted query-string values or 'cont