https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T14:56:58.250110+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-50248 CVE-2023-50248 — CKAN out of memory error when submitting the dataset form with a specially-crafted field 2026-10-06T14:56:58.251664+00:00

Affected: ckan

CKAN is an open-source data management system for powering data hubs and data portals. Starting in version 2.0.0 and prior to versions 2.9.10 and 2.10.3, when submitting a POST request to the `/dataset/new` endpoint (including either the auth cookie or the `Authorization` header) with a specially-crafted field, an attacker can create an out-of-memory error in the hosting server. To trigger this error, the attacker need to have permissions to create or edit datasets. This vulnerability has been patched in CKAN 2.10.3 and 2.9.10.

 https://cve.radiocsirt.org/vuln/ghsa-7fgc-89cx-w8j5 GHSA-7fgc-89cx-w8j5 — Out of memory error when submitting the dataset form with a specially-crafted field 2026-10-06T14:56:58.251717+00:00

Affected: PyPI: ckan

### Impact

When submitting a POST request to the `/dataset/new` endpoint (including either the auth cookie or the `Authorization` header) with a specially-crafted field, an attacker can create an out-of-memory error in the hosting server.

To trigger this error the user needs to have permissions to create or edit datasets.

### Patches

This vulnerability has been patched in CKAN 2.10.3 and 2.9.10