piccolo_admin vulnerabilities

2 known vulnerabilities in piccolo_admin from Piccolo-orm. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  piccolo_admin: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-55485Aug 28, 2026Piccolo-orm

  Piccolo Admin is an admin interface and content management system for Python, built on top of Piccolo. Prior to 1.14.0, piccolo_admin/endpoints.py uses superuser_validators to block PUT, PATCH, DELETE, and POST requests by non-superusers but permits GET reques

• 7.7 High severity

  piccolo_admin: Improper Neutralization of Input During Web Page Generation

  CVE-2024-30248Apr 2, 2024Piccolo-orm

  Piccolo Admin is an admin interface/content management system for Python, built on top of Piccolo. Piccolo's admin panel allows media files to be uploaded. As a default, SVG is an allowed file type for upload. An attacker can upload an SVG which when loaded ca