{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.1.20"}],"component":"django-mdeditor","cve_ids":["CVE-2025-13030"],"ecosystem":"PyPI","epss":0.00308,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-qp2c-xqv6-phh6","id":"tcs_01M5KGZHR1DET27D5WB7FNFG3M","modified_at":"2026-07-13T16:31:44.272609363Z","published_at":"2026-07-13T15:02:55.600904Z","references":["https://osv.dev/vulnerability/PYSEC-2026-2450","https://nvd.nist.gov/vuln/detail/CVE-2025-13030","https://github.com/pylixm/django-mdeditor/issues/151","https://github.com/pylixm/django-mdeditor/pull/185","https://github.com/pylixm/django-mdeditor/commit/3e80f9edcabc5d2fc136b05a501964b8a5e97cfe","https://github.com/pylixm/django-mdeditor","https://github.com/pylixm/django-mdeditor/blob/e8dd73fb8571ddff2e7a20a4bfa88c376cc33b62/mdeditor/views.py%23L25","https://security.snyk.io/vuln/SNYK-PYTHON-DJANGOMDEDITOR-8630926","https://pypi.org/project/django-mdeditor","https://github.com/advisories/GHSA-qp2c-xqv6-phh6"],"severity":{"label":"high","score":7.1},"sources":[{"source":"osv","source_id":"PYSEC-2026-2450","url":"https://osv.dev/vulnerability/PYSEC-2026-2450"}],"summary":"django-mdeditor is Missing Authentication for Critical Function"}