WA
Product
wagtail
by wagtail · last CVE Aug 24, 2026
17
CVEs
0
On KEV
7.3
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 13Low 3
Watch

Add wagtail to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-54260
2.7
0%
Jul 1
Wagtail: Denial of service via unbounded filter specs in the image preview
Affected: < 7.0.8; >= 7.1.0, < 7.3.3; >= 7.4.0, < 7.4.2
CVE-2026-25517
2.7
0%
Feb 4
Wagtail has improper permission handling on admin preview endpoints
Affected: < 6.3.6; >= 6.4rc1, < 7.0.4; >= 7.1rc1, < 7.1.3; >= 7.2rc1, < 7.2.2; = 7.3rc1
CVE-2024-32882
2.7
0%
May 2
Permission check bypass when editing a model with per-field restrictions in wagtail
Affected: >= 6.0.0, < 6.0.3
Showing 3