CVE-2026-54260
2 advisories.
PyPI/wagtail CVE-2026-54260: medium 4.3, EPSS 0.37%
Wagtail: Denial of service via unbounded filter specs in the image preview
Action: Upgrade wagtail to 7.0.8 or later.
pip install wagtail==7.0.8pip install wagtail==7.3.3pip install wagtail==7.4.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.0.8 | - |
| 7.1 | 7.3.3 | - |
| 7.4 | 7.4.2 | - |
Fixed versions
| 7.0.8 | 7.3.3 | 7.4.2 |
Sources
- osv: GHSA-f2p5-j6fg-5cxf
- https://github.com/wagtail/wagtail/security/advisories/GHSA-f2p5-j6fg-5cxf
- https://nvd.nist.gov/vuln/detail/CVE-2026-54260
- https://github.com/pypa/advisory-database/tree/main/vulns/wagtail/PYSEC-2026-613.yaml
- https://github.com/wagtail/wagtail
CVE-2026-54260 · published · modified · JSON
PyPI/wagtail CVE-2026-54260: low 2.7, EPSS 0.37%
Wagtail is an open source content management system built on Django. In versions prior to 7.0.8, 7.3.3 and 7.4.2, an authenticated admin user can trigger expensive rendition processing with purposeful
Action: Upgrade wagtail to 7.0.8 or later.
pip install wagtail==7.0.8pip install wagtail==7.3.3pip install wagtail==7.4.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.0.8 | - |
| 7.1 | 7.3.3 | - |
| 7.4 | 7.4.2 | - |
Fixed versions
| 7.0.8 | 7.3.3 | 7.4.2 |
Sources
CVE-2026-54260 · published · modified · JSON