https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:35:53.372428+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-13030 CVE-2025-13030 2026-10-02T20:35:53.374912+00:00

Affected: django-mdeditor

All versions of the package django-mdeditor are vulnerable to Missing Authentication for Critical Function in the image upload endpoint. An attacker can upload malicious files and achieve arbitrary code execution since this endpoint lacks authentication protection and proper sanitisation of file names.

 https://cve.radiocsirt.org/vuln/ghsa-qp2c-xqv6-phh6 GHSA-qp2c-xqv6-phh6 — django-mdeditor is Missing Authentication for Critical Function 2026-10-02T20:35:53.374975+00:00

Affected: PyPI: django-mdeditor

All versions of the package django-mdeditor are vulnerable to Missing Authentication for Critical Function in the image upload endpoint. An attacker can upload malicious files and achieve arbitrary code execution since this endpoint lacks authentication protection and proper sanitisation of file names.