PyPI/ckan CVE-2024-43371: medium 4.5, EPSS 0.37%
Potential access to sensitive URLs via CKAN extensions (SSRF)
Action: Upgrade ckan to 2.10.5 or later.
pip install ckan==2.10.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.10.5 | - |
Fixed versions
| 2.10.5 |
Sources
- osv: PYSEC-2026-1252
- https://github.com/ckan/ckan/security/advisories/GHSA-g9ph-j5vj-f8wm
- https://nvd.nist.gov/vuln/detail/CVE-2024-43371
- https://github.com/ckan/ckan/commit/382beaec98cb331f2a030459ef043c50eaf5ad53
- https://github.com/ckan/ckan/commit/8601183cc2fc87277ea5b33ff75c3a5610812ab5
- https://github.com/ckan/ckan
- https://pypi.org/project/ckan
- https://github.com/advisories/GHSA-g9ph-j5vj-f8wm
CVE-2024-43371 · published · modified · JSON