CVE-2026-54259
2 advisories.
PyPI/wagtail CVE-2026-54259: medium 4.3, EPSS 0.27%
Wagtail: Improper restriction handling on Documents and Images chosen endpoints
Action: Upgrade wagtail to 7.0.8 or later.
pip install wagtail==7.0.8pip install wagtail==7.3.3pip install wagtail==7.4.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.0.8 | - |
| 7.1 | 7.3.3 | - |
| 7.4 | 7.4.2 | - |
Fixed versions
| 7.0.8 | 7.3.3 | 7.4.2 |
Sources
- osv: GHSA-h54r-xq46-qwqm
- https://github.com/wagtail/wagtail/security/advisories/GHSA-h54r-xq46-qwqm
- https://nvd.nist.gov/vuln/detail/CVE-2026-54259
- https://github.com/pypa/advisory-database/tree/main/vulns/wagtail/PYSEC-2026-612.yaml
- https://github.com/wagtail/wagtail
CVE-2026-54259 · published · modified · JSON
PyPI/wagtail CVE-2026-54259: medium 4.3, EPSS 0.27%
Wagtail is an open source content management system built on Django. In versions prior to 7.0.8, 7.3.3 and 7.4.2, the Documents and Images chooser's chosen endpoint incorrectly listed items for which
Action: Upgrade wagtail to 7.0.8 or later.
pip install wagtail==7.0.8pip install wagtail==7.3.3pip install wagtail==7.4.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.0.8 | - |
| 7.1 | 7.3.3 | - |
| 7.4 | 7.4.2 | - |
Fixed versions
| 7.0.8 | 7.3.3 | 7.4.2 |
Sources
CVE-2026-54259 · published · modified · JSON