wagtail (PyPI)
Advisories
109
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 8.0rc2 or later clears every advisory below that has a fix.
Upgrade commands
pip
pip install --upgrade "wagtail>=8.0rc2"poetry
poetry add "wagtail>=8.0rc2"uv
uv add "wagtail>=8.0rc2"Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-jm5p-837g-rv8g Wagtail: Improper restriction handling on Page translation API endpoint |
Medium | >= 7.4rc1, < 7.4.3 | 7.4.3 |
| GHSA-jm5p-837g-rv8g Wagtail: Improper restriction handling on Page translation API endpoint |
Medium | >= 7.1rc1, < 7.3.4 | 7.3.4 |
| GHSA-jm5p-837g-rv8g Wagtail: Improper restriction handling on Page translation API endpoint |
Medium | < 7.0.9 | 7.0.9 |
| GHSA-jm5p-837g-rv8g Wagtail: Improper restriction handling on Page translation API endpoint |
Medium | >= 8.0rc1, < 8.0rc2 | 8.0rc2 |
| GHSA-x5cx-w6p2-mxf2 Wagtail: Improper permission handling when copying snippets |
Medium | >= 7.4, < 7.4.3 | 7.4.3 |
| GHSA-x5cx-w6p2-mxf2 Wagtail: Improper permission handling when copying snippets |
Medium | >= 7.1, < 7.3.4 | 7.3.4 |
| GHSA-x5cx-w6p2-mxf2 Wagtail: Improper permission handling when copying snippets |
Medium | < 7.0.9 | 7.0.9 |
| GHSA-x5cx-w6p2-mxf2 Wagtail: Improper permission handling when copying snippets |
Medium | >= 8.0rc1, < 8.0rc2 | 8.0rc2 |
| GHSA-c2xx-cjmh-9q8f Wagtail: Improper restriction handling on descendant collections in Documents and Images API |
Medium | >= 8.0rc1, < 8.0rc2 | 8.0rc2 |
| GHSA-c2xx-cjmh-9q8f Wagtail: Improper restriction handling on descendant collections in Documents and Images API |
Medium | >= 7.1, < 7.3.4 | 7.3.4 |
| GHSA-c2xx-cjmh-9q8f Wagtail: Improper restriction handling on descendant collections in Documents and Images API |
Medium | < 7.0.9 | 7.0.9 |
| GHSA-c2xx-cjmh-9q8f Wagtail: Improper restriction handling on descendant collections in Documents and Images API |
Medium | >= 7.4, < 7.4.3 | 7.4.3 |
| GHSA-92hv-j533-69wc Wagtail: Identification of documents by SHA1 hash |
Low | < 7.0.9 | 7.0.9 |
| GHSA-92hv-j533-69wc Wagtail: Identification of documents by SHA1 hash |
Low | >= 7.4, < 7.4.3 | 7.4.3 |
| GHSA-92hv-j533-69wc Wagtail: Identification of documents by SHA1 hash |
Low | >= 8.0rc1, < 8.0rc2 | 8.0rc2 |
| GHSA-92hv-j533-69wc Wagtail: Identification of documents by SHA1 hash |
Low | >= 7.1, < 7.3.4 | 7.3.4 |
| GHSA-3vrh-m9w7-v94f Wagtail: Improper restriction handling on Pages admin API |
Medium EPSS 0.34% |
< 7.0.9 | 7.0.9 |
| GHSA-3vrh-m9w7-v94f Wagtail: Improper restriction handling on Pages admin API |
Medium EPSS 0.34% |
>= 7.1, < 7.3.4 | 7.3.4 |
| GHSA-3vrh-m9w7-v94f Wagtail: Improper restriction handling on Pages admin API |
Medium EPSS 0.34% |
>= 7.4, < 7.4.3 | 7.4.3 |
| GHSA-3vrh-m9w7-v94f Wagtail: Improper restriction handling on Pages admin API |
Medium EPSS 0.34% |
< 7.0.9>= 7.1, < 7.3.4>= 7.4, < 7.4.3>= 8.0rc1, < 8.0rc2 | 7.0.97.3.47.4.38.0rc2 |
| GHSA-3vrh-m9w7-v94f Wagtail: Improper restriction handling on Pages admin API |
Medium EPSS 0.34% |
>= 8.0rc1, < 8.0rc2 | 8.0rc2 |
| GHSA-23m2-mghx-vqmf Wagtail: Reflected XSS in dynamic image URL generator view |
High EPSS 0.36% |
>= 7.3, < 7.3.3>= 7.4, < 7.4.2 | 7.3.37.4.2 |
| GHSA-23m2-mghx-vqmf Wagtail: Reflected XSS in dynamic image URL generator view |
High EPSS 0.36% |
>= 7.3, < 7.3.3 | 7.3.3 |
| GHSA-23m2-mghx-vqmf Wagtail: Reflected XSS in dynamic image URL generator view |
High EPSS 0.36% |
>= 7.4, < 7.4.2 | 7.4.2 |
| GHSA-8634-mr4j-r72c Wagtail: Pages translations can be created without page permissions when using simple_translation |
Medium EPSS 0.27% |
< 7.0.8>= 7.1, < 7.3.3>= 7.4, < 7.4.2 | 7.0.87.3.37.4.2 |
| GHSA-8634-mr4j-r72c Wagtail: Pages translations can be created without page permissions when using simple_translation |
Medium EPSS 0.27% |
< 7.0.8 | 7.0.8 |
| GHSA-8634-mr4j-r72c Wagtail: Pages translations can be created without page permissions when using simple_translation |
Medium EPSS 0.27% |
>= 7.1, < 7.3.3 | 7.3.3 |
| GHSA-8634-mr4j-r72c Wagtail: Pages translations can be created without page permissions when using simple_translation |
Medium EPSS 0.27% |
>= 7.4, < 7.4.2 | 7.4.2 |
| GHSA-r6p4-grq7-xm4m Wagtail: Improper permission handling in image preview |
Medium EPSS 0.34% |
>= 7.4, < 7.4.2 | 7.4.2 |
| GHSA-r6p4-grq7-xm4m Wagtail: Improper permission handling in image preview |
Medium EPSS 0.34% |
< 7.0.8>= 7.1, < 7.3.3>= 7.4, < 7.4.2 | 7.0.87.3.37.4.2 |
| GHSA-r6p4-grq7-xm4m Wagtail: Improper permission handling in image preview |
Medium EPSS 0.34% |
< 7.0.8 | 7.0.8 |
| GHSA-r6p4-grq7-xm4m Wagtail: Improper permission handling in image preview |
Medium EPSS 0.34% |
>= 7.1, < 7.3.3 | 7.3.3 |
| GHSA-f2p5-j6fg-5cxf Wagtail: Denial of service via unbounded filter specs in the image preview |
Low EPSS 0.37% |
>= 7.4, < 7.4.2 | 7.4.2 |
| GHSA-f2p5-j6fg-5cxf Wagtail: Denial of service via unbounded filter specs in the image preview |
Low EPSS 0.37% |
< 7.0.8>= 7.1, < 7.3.3>= 7.4, < 7.4.2 | 7.0.87.3.37.4.2 |
| GHSA-f2p5-j6fg-5cxf Wagtail: Denial of service via unbounded filter specs in the image preview |
Low EPSS 0.37% |
< 7.0.8 | 7.0.8 |
| GHSA-f2p5-j6fg-5cxf Wagtail: Denial of service via unbounded filter specs in the image preview |
Low EPSS 0.37% |
>= 7.1, < 7.3.3 | 7.3.3 |
| GHSA-h54r-xq46-qwqm Wagtail: Improper restriction handling on Documents and Images chosen endpoints |
Medium EPSS 0.27% |
>= 7.1, < 7.3.3 | 7.3.3 |
| GHSA-h54r-xq46-qwqm Wagtail: Improper restriction handling on Documents and Images chosen endpoints |
Medium EPSS 0.27% |
< 7.0.8>= 7.1, < 7.3.3>= 7.4, < 7.4.2 | 7.0.87.3.37.4.2 |
| GHSA-h54r-xq46-qwqm Wagtail: Improper restriction handling on Documents and Images chosen endpoints |
Medium EPSS 0.27% |
< 7.0.8 | 7.0.8 |
| GHSA-h54r-xq46-qwqm Wagtail: Improper restriction handling on Documents and Images chosen endpoints |
Medium EPSS 0.27% |
>= 7.4, < 7.4.2 | 7.4.2 |
| GHSA-67rv-mg8q-5pf3 Wagtail has improper permission handling when copying pages |
Medium EPSS 0.20% |
< 7.0.7 | 7.0.7 |
| GHSA-67rv-mg8q-5pf3 Wagtail has improper permission handling when copying pages |
Medium EPSS 0.20% |
>= 7.1, < 7.3.2 | 7.3.2 |
| GHSA-67rv-mg8q-5pf3 Wagtail has improper permission handling when copying pages |
Medium EPSS 0.20% |
< 7.0.7>= 7.1, < 7.3.2 | 7.0.77.3.2 |
| GHSA-p5gm-92h4-6pv6 Wagtail has improper restriction handling on Documents and Images API |
Medium EPSS 0.26% |
>= 7.1, < 7.3.2 | 7.3.2 |
| GHSA-p5gm-92h4-6pv6 Wagtail has improper restriction handling on Documents and Images API |
Medium EPSS 0.26% |
< 7.0.7 | 7.0.7 |
| GHSA-p5gm-92h4-6pv6 Wagtail has improper restriction handling on Documents and Images API |
Medium EPSS 0.26% |
< 7.0.7>= 7.1, < 7.3.2 | 7.0.77.3.2 |
| GHSA-pwm3-7fv4-g6xx Wagtail has improper permission handling when deleting form submissions |
Medium EPSS 0.17% |
< 7.0.7 | 7.0.7 |
| GHSA-pwm3-7fv4-g6xx Wagtail has improper permission handling when deleting form submissions |
Medium EPSS 0.17% |
>= 7.1, < 7.3.2 | 7.3.2 |
| GHSA-pwm3-7fv4-g6xx Wagtail has improper permission handling when deleting form submissions |
Medium EPSS 0.17% |
< 7.0.7>= 7.1, < 7.3.2 | 7.0.77.3.2 |
| GHSA-c4mr-889m-vgf6 Wagtail has improper permission handling when viewing page history |
Medium EPSS 0.16% |
< 7.0.7>= 7.1, < 7.3.2 | 7.0.77.3.2 |
| GHSA-c4mr-889m-vgf6 Wagtail has improper permission handling when viewing page history |
Medium EPSS 0.16% |
>= 7.1, < 7.3.2 | 7.3.2 |
| GHSA-c4mr-889m-vgf6 Wagtail has improper permission handling when viewing page history |
Medium EPSS 0.16% |
< 7.0.7 | 7.0.7 |
| GHSA-c6wj-9vcj-75pj Wagtail has improper permission handling when comparing revisions |
Medium EPSS 0.20% |
< 7.0.7 | 7.0.7 |
| GHSA-c6wj-9vcj-75pj Wagtail has improper permission handling when comparing revisions |
Medium EPSS 0.20% |
< 7.0.7>= 7.1, < 7.3.2 | 7.0.77.3.2 |
| GHSA-c6wj-9vcj-75pj Wagtail has improper permission handling when comparing revisions |
Medium EPSS 0.20% |
>= 7.1, < 7.3.2 | 7.3.2 |
| GHSA-p4v8-rw59-93cq Wagtail Vulnerable to Cross-site Scripting in simple_translation admin interface |
Medium EPSS 0.53% |
>= 7.3rc1, < 7.3.1 | 7.3.1 |
| GHSA-p4v8-rw59-93cq Wagtail Vulnerable to Cross-site Scripting in simple_translation admin interface |
Medium EPSS 0.53% |
>= 7.1rc1, < 7.2.3 | 7.2.3 |
| GHSA-p4v8-rw59-93cq Wagtail Vulnerable to Cross-site Scripting in simple_translation admin interface |
Medium EPSS 0.53% |
>= 6.4rc1, < 7.0.6 | 7.0.6 |
| GHSA-p4v8-rw59-93cq Wagtail Vulnerable to Cross-site Scripting in simple_translation admin interface |
Medium EPSS 0.53% |
< 6.3.8 | 6.3.8 |
| GHSA-p4v8-rw59-93cq Wagtail Vulnerable to Cross-site Scripting in simple_translation admin interface |
Medium EPSS 0.53% |
< 6.3.8>= 6.4, < 7.0.6>= 7.1, < 7.2.3 | 6.3.87.0.67.2.3 |
| GHSA-p5cm-246w-84jm Wagtail Vulnerable to Cross-site Scripting in TableBlock class attributes |
Medium EPSS 0.50% |
< 6.3.8 | 6.3.8 |
| GHSA-p5cm-246w-84jm Wagtail Vulnerable to Cross-site Scripting in TableBlock class attributes |
Medium EPSS 0.50% |
>= 7.3rc1, < 7.3.1 | 7.3.1 |
| GHSA-p5cm-246w-84jm Wagtail Vulnerable to Cross-site Scripting in TableBlock class attributes |
Medium EPSS 0.50% |
< 6.3.8>= 6.4, < 7.0.6>= 7.1, < 7.2.3 | 6.3.87.0.67.2.3 |
| GHSA-p5cm-246w-84jm Wagtail Vulnerable to Cross-site Scripting in TableBlock class attributes |
Medium EPSS 0.50% |
>= 6.4rc1, < 7.0.6 | 7.0.6 |
| GHSA-p5cm-246w-84jm Wagtail Vulnerable to Cross-site Scripting in TableBlock class attributes |
Medium EPSS 0.50% |
>= 7.1rc1, < 7.2.3 | 7.2.3 |
| GHSA-4qvv-g3vr-m348 Wagtail has improper permission handling on admin preview endpoints |
Low EPSS 0.38% |
>= 6.4rc1, < 7.0.4 | 7.0.4 |
| GHSA-4qvv-g3vr-m348 Wagtail has improper permission handling on admin preview endpoints |
Low EPSS 0.38% |
>= 7.1rc1, < 7.1.3 | 7.1.3 |
| GHSA-4qvv-g3vr-m348 Wagtail has improper permission handling on admin preview endpoints |
Low EPSS 0.38% |
< 6.3.6>= 6.4rc1, < 7.0.4>= 7.1rc1, < 7.1.3>= 7.2rc1, < 7.2.2>= 7.3rc1, < 7.3 | 6.3.67.0.47.1.37.2.27.3 |
| GHSA-4qvv-g3vr-m348 Wagtail has improper permission handling on admin preview endpoints |
Low EPSS 0.38% |
>= 7.3rc1, < 7.3 | 7.3 |
| GHSA-4qvv-g3vr-m348 Wagtail has improper permission handling on admin preview endpoints |
Low EPSS 0.38% |
>= 7.2rc1, < 7.2.2 | 7.2.2 |
| GHSA-4qvv-g3vr-m348 Wagtail has improper permission handling on admin preview endpoints |
Low EPSS 0.38% |
< 6.3.6 | 6.3.6 |
| GHSA-jmp3-39vp-fwg8 Wagtail regular expression denial-of-service via search query parsing |
Medium EPSS 0.61% |
>= 2.0, < 5.2.6 | 5.2.6 |
| GHSA-jmp3-39vp-fwg8 Wagtail regular expression denial-of-service via search query parsing |
Medium EPSS 0.61% |
>= 6.0, < 6.0.6 | 6.0.6 |
| GHSA-jmp3-39vp-fwg8 Wagtail regular expression denial-of-service via search query parsing |
Medium EPSS 0.61% |
>= 6.0, < 6.0.6>= 6.1, < 6.1.3>= 2.0, < 5.2.6 | 5.2.66.0.66.1.3 |
| GHSA-jmp3-39vp-fwg8 Wagtail regular expression denial-of-service via search query parsing |
Medium EPSS 0.61% |
>= 6.1, < 6.1.3 | 6.1.3 |
| GHSA-xxfm-vmcf-g33f Improper Handling of Insufficient Permissions in `wagtail.contrib.settings` |
Medium EPSS 0.33% |
>= 6.0.0, < 6.0.5 | 6.0.5 |
| GHSA-xxfm-vmcf-g33f Improper Handling of Insufficient Permissions in `wagtail.contrib.settings` |
Medium EPSS 0.33% |
>= 6.0.0, < 6.0.5>= 6.1.0, < 6.1.2 | 6.0.56.1.2 |
| GHSA-xxfm-vmcf-g33f Improper Handling of Insufficient Permissions in `wagtail.contrib.settings` |
Medium EPSS 0.33% |
>= 6.1.0, < 6.1.2 | 6.1.2 |
| GHSA-w2v8-php4-p8hc Wagtail has permission check bypass when editing a model with per-field restrictions through `wagtail.contrib.settings` or `ModelViewSet` |
Low EPSS 0.48% |
>= 6.0.0, < 6.0.3 | 6.0.3 |
| GHSA-w2v8-php4-p8hc Wagtail has permission check bypass when editing a model with per-field restrictions through `wagtail.contrib.settings` or `ModelViewSet` |
Low EPSS 0.48% |
>= 6.0.0, < 6.0.3 | 6.0.3 |
| GHSA-fc75-58r8-rm3h Wagtail vulnerable to disclosure of user names via admin bulk action views |
Low EPSS 0.56% |
< 4.1.9>= 4.2, < 5.0.5>= 5.1, < 5.1.3 | 4.1.95.0.55.1.3 |
| GHSA-fc75-58r8-rm3h Wagtail vulnerable to disclosure of user names via admin bulk action views |
Low EPSS 0.56% |
< 4.1.9 | 4.1.9 |
| GHSA-fc75-58r8-rm3h Wagtail vulnerable to disclosure of user names via admin bulk action views |
Low EPSS 0.56% |
>= 4.2.0, < 5.0.5 | 5.0.5 |
| GHSA-fc75-58r8-rm3h Wagtail vulnerable to disclosure of user names via admin bulk action views |
Low EPSS 0.56% |
>= 5.1.0, < 5.1.3 | 5.1.3 |
| GHSA-33pv-vcgh-jfg9 Wagtail vulnerable to denial-of-service via memory exhaustion when uploading large files |
Medium EPSS 1.07% |
>= 4.2, < 4.2.2 | 4.2.2 |
| GHSA-5286-f2rf-35c2 Wagtail vulnerable to stored Cross-site Scripting attack via ModelAdmin views |
Medium EPSS 0.78% |
>= 1.5, < 4.1.4 | 4.1.4 |
| GHSA-5286-f2rf-35c2 Wagtail vulnerable to stored Cross-site Scripting attack via ModelAdmin views |
Medium EPSS 0.78% |
>= 4.2, < 4.2.2 | 4.2.2 |
| GHSA-5286-f2rf-35c2 Wagtail vulnerable to stored Cross-site Scripting attack via ModelAdmin views |
Medium EPSS 0.78% |
>= 1.5, < 4.1.4>= 4.2, < 4.2.2 | 4.1.44.2.2 |
| GHSA-33pv-vcgh-jfg9 Wagtail vulnerable to denial-of-service via memory exhaustion when uploading large files |
Medium EPSS 1.07% |
>= 4.2, < 4.2.2< 4.1.4 | 4.1.44.2.2 |
| GHSA-33pv-vcgh-jfg9 Wagtail vulnerable to denial-of-service via memory exhaustion when uploading large files |
Medium EPSS 1.07% |
< 4.1.4 | 4.1.4 |
| GHSA-xqxm-2rpm-3889 Comment reply notifications sent to incorrect users |
Low EPSS 0.97% |
>= 2.13, < 2.15.2 | 2.15.2 |
| GHSA-xqxm-2rpm-3889 Comment reply notifications sent to incorrect users |
Low EPSS 0.97% |
>= 2.13, < 2.15.2 | 2.15.2 |
| GHSA-xfrw-hxr5-ghqf Cross-site Scripting in wagtail |
Medium EPSS 1.11% |
< 2.11.8>= 2.12, < 2.12.5>= 2.13, < 2.13.2 | 2.11.82.12.52.13.2 |
| GHSA-xfrw-hxr5-ghqf Cross-site Scripting in wagtail |
Medium EPSS 1.11% |
>= 2.13, < 2.13.2 | 2.13.2 |
| GHSA-xfrw-hxr5-ghqf Cross-site Scripting in wagtail |
Medium EPSS 1.11% |
>= 2.12, < 2.12.5 | 2.12.5 |
| GHSA-xfrw-hxr5-ghqf Cross-site Scripting in wagtail |
Medium EPSS 1.11% |
< 2.11.8 | 2.11.8 |
| GHSA-wq5h-f9p5-q7fx Improper validation of URLs ('Cross-site Scripting') in Wagtail rich text fields |
Medium EPSS 0.63% |
>= 2.11, < 2.11.7< 2.11.6>= 2.12, < 2.12.4 | 2.11.62.11.72.12.4 |
| GHSA-wq5h-f9p5-q7fx Improper validation of URLs ('Cross-site Scripting') in Wagtail rich text fields |
Medium EPSS 0.63% |
>= 2.12, < 2.12.4 | 2.12.4 |
| GHSA-wq5h-f9p5-q7fx Improper validation of URLs ('Cross-site Scripting') in Wagtail rich text fields |
Medium EPSS 0.63% |
< 2.11.7 | 2.11.7 |
| GHSA-2473-9hgq-j7xw Cross-Site Scripting in Wagtail |
Medium EPSS 1.10% |
< 2.7.4 | 2.7.4 |
| GHSA-2473-9hgq-j7xw Cross-Site Scripting in Wagtail |
Medium EPSS 1.10% |
>= 2.7, < 2.7.4>= 2.9, < 2.9.3 | 2.7.42.9.3 |
| GHSA-2473-9hgq-j7xw Cross-Site Scripting in Wagtail |
Medium EPSS 1.10% |
>= 2.8rc1, < 2.9.3 | 2.9.3 |
| GHSA-jjjr-3jcw-f8v6 Potential Observable Timing Discrepancy in Wagtail |
Medium EPSS 0.25% |
>= 2.7, < 2.7.3>= 2.8, < 2.8.2 | 2.7.32.8.2 |
| GHSA-jjjr-3jcw-f8v6 Potential Observable Timing Discrepancy in Wagtail |
Medium EPSS 0.25% |
>= 2.9rc1, < 2.9 | 2.9 |
| GHSA-jjjr-3jcw-f8v6 Potential Observable Timing Discrepancy in Wagtail |
Medium EPSS 0.25% |
>= 2.8rc1, < 2.8.2 | 2.8.2 |
| GHSA-jjjr-3jcw-f8v6 Potential Observable Timing Discrepancy in Wagtail |
Medium EPSS 0.25% |
< 2.7.3 | 2.7.3 |
| GHSA-v2wc-pfq2-5cm6 Possible XSS attack in Wagtail |
Medium EPSS 1.27% |
>= 1.9, < 2.7.2 | 2.7.2 |
| GHSA-v2wc-pfq2-5cm6 Possible XSS attack in Wagtail |
Medium EPSS 1.27% |
>= 2.8.0, < 2.8.1 | 2.8.1 |
| GHSA-v2wc-pfq2-5cm6 Possible XSS attack in Wagtail |
Medium EPSS 1.27% |
>= 1.9.0, < 2.7.2 | 2.7.2 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor