PyPI/wagtail CVE-2026-54259: medium 4.3, EPSS 0.27%
Wagtail is an open source content management system built on Django. In versions prior to 7.0.8, 7.3.3 and 7.4.2, the Documents and Images chooser's chosen endpoint incorrectly listed items for which
Action: Upgrade wagtail to 7.0.8 or later.
pip install wagtail==7.0.8pip install wagtail==7.3.3pip install wagtail==7.4.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.0.8 | - |
| 7.1 | 7.3.3 | - |
| 7.4 | 7.4.2 | - |
Fixed versions
| 7.0.8 | 7.3.3 | 7.4.2 |
Sources
CVE-2026-54259 · published · modified · JSON