Login Request a demo
DE
Product
DefectDojo
by OWASP · last CVE Jul 23, 2026
3
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 1Medium 2Low 0
Severity
All severities3Critical0High1Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add DefectDojo to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-48171
8.8
1%
Aug 12
An issue in OWASP DefectDojo before v.1.5.3.1 allows a remote attacker to escalate privileges via the user permissions component
Affected: before 1.5.3.1
CVE-2026-3816
6.5
1%
Mar 9
OWASP DefectDojo SonarQubeParser/MSDefenderParser parser.py input_zip.read denial of service
Affected: 2.55.0; 2.55.1; 2.55.2; 2.55.3; 2.55.4
CVE-2026-16764
6.3
0%
Jul 23
OWASP DefectDojo API/Web serializers.py UserSerializer privileges management
Affected: 2.59.0
Showing 3