https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 04:03:32 +0000 https://cve.radiocsirt.org/vuln/cve-2026-41132 <p><strong>Affected:</strong> ckan</p> <p>CKAN is an open-source DMS (data management system) for powering data hubs and data portals. Prior to 2.10.10 and 2.11.5, the configured SMTP server may be spoofed with any certificate (e.g. self-signed), leaving credentials and all emails sent open to MITM attacks. This vulnerability is fixed in 2.10.10 and 2.11.5.</p> <p><strong>Affected:</strong> ckan</p> <p>CKAN is an open-source DMS (data management system) for powering data hubs and data portals. Prior to 2.10.10 and 2.11.5, the configured SMTP server may be spoofed with any certificate (e.g. self-signed), leaving credentials and all emails sent open to MITM attacks. This vulnerability is fixed in 2.10.10 and 2.11.5.</p> https://cve.radiocsirt.org/vuln/cve-2026-41132 https://cve.radiocsirt.org/vuln/ghsa-mpfm-fpgx-647q <p><strong>Affected:</strong> PyPI: ckan</p> <p>### Impact Configured SMTP server may be spoofed with any certificate (e.g. self-signed), leaving credentials and all emails sent open to MITM attacks.</p> <p>### Patches The vulnerability has been patched in CKAN 2.10.10 and CKAN 2.11.5</p> <p><strong>Affected:</strong> PyPI: ckan</p> <p>### Impact Configured SMTP server may be spoofed with any certificate (e.g. self-signed), leaving credentials and all emails sent open to MITM attacks.</p> <p>### Patches The vulnerability has been patched in CKAN 2.10.10 and CKAN 2.11.5</p> https://cve.radiocsirt.org/vuln/ghsa-mpfm-fpgx-647q