MW
Product
Mediawiki - WikiLambda Extension
5
CVEs
0
On KEV
7.4
Max CVSS
2
New 30D
Severity mix
Critical 0High 1Medium 3Low 1
Watch
Add Mediawiki - WikiLambda Extension to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-103446 | 7.4 | Sep 30 | WikiLambda exposes anonymous execution of unsaved Abstract Wikipedia fragments Affected: 1.46 |
| CVE-2025-62695 | 6.9 | Oct 21 | Stored XSS through system messages Affected: master |
| CVE-2026-103046 | 6.1 | Sep 29 | WikifunctionsFragmentRenderer does unsafe string replacements on user-provided HTML Affected: before 1.46.1 |
| CVE-2026-58517 | 4.3 | Jul 1 | Blocked users can create and edit WikiLambda objects Affected: before 1.43.9,1.44.6,1.45.4 |
| CVE-2026-96872 | 2.9 | Sep 23 | WikiLambda public function execution bypasses the unsaved-code permission through nested Z825 compositions Affected: before 1.47.0 |
Showing 5