PyPI/wagtail CVE-2020-11037: medium 6.1, EPSS 0.25%

Potential Observable Timing Discrepancy in Wagtail

Action: Upgrade wagtail to 2.7.3 or later.

pip install wagtail==2.7.3

pip install wagtail==2.8.2

pip install wagtail==2.9

Affected

Fixed versions

Sources

• osv: GHSA-jjjr-3jcw-f8v6
• https://github.com/wagtail/wagtail/security/advisories/GHSA-jjjr-3jcw-f8v6
• https://nvd.nist.gov/vuln/detail/CVE-2020-11037
• https://github.com/wagtail/wagtail/commit/3c030490ed575bb9cd01dfb3a890477dcaeb2edf
• https://github.com/wagtail/wagtail/commit/b76ab57ee859732b9cf9287d380493ab24061090
• https://github.com/wagtail/wagtail/commit/ba9d424bd1ca5ce1910d3de74f5cc07214fbfb11
• https://github.com/wagtail/wagtail/commit/bac3cd0a26b023e595cf2959aae7da15bb5e4340
• https://github.com/pypa/advisory-database/tree/main/vulns/wagtail/PYSEC-2020-153.yaml
• https://github.com/wagtail/wagtail

CVE-2020-11037 · published 2020-05-07T18:04:53Z · modified 2026-07-08T06:00:56.875033918Z · JSON