CVE-2025-14691

2 advisories.

PyPI/mayan-edms CVE-2025-14691: medium 4.3, EPSS 0.46%

Mayan EDMS is vulnerable to XSS through the /authentication/ file

Action: Upgrade mayan-edms to 4.6.12 or later.

pip install mayan-edms==4.10.2

pip install mayan-edms==4.9.7

pip install mayan-edms==4.8.10

pip install mayan-edms==4.7.8

pip install mayan-edms==4.6.12

Affected

introduced	fixed	last affected
4.10.0	4.10.2	-
4.9.0	4.9.7	-
4.8.0	4.8.10	-
4.7.0	4.7.8	-
0	4.6.12	-

Fixed versions

4.10.2

4.9.7

4.8.10

4.7.8

4.6.12

Sources

CVE-2025-14691 · published 2025-12-15T00:30:25Z · modified 2026-06-06T00:45:48.853093631Z · JSON

PyPI/mayan-edms CVE-2025-14691: medium 6.1, EPSS 0.46%

A vulnerability was detected in Mayan EDMS up to 4.10.1. The affected element is an unknown function of the file /authentication/. The manipulation results in cross site scripting. The attack may be p

Action: Upgrade mayan-edms to 4.10.2 or later.

pip install mayan-edms==4.10.2

Affected

introduced	fixed	last affected
0	4.10.2	-

Fixed versions

4.10.2

Sources

CVE-2025-14691 · published 2025-12-14T23:15:36.680Z · modified 2026-06-10T17:02:05.580750833Z · JSON