Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/ckan@1.3.3
purl pkg:pypi/ckan@1.3.3
Next non-vulnerable version 2.9.7
Latest non-vulnerable version 2.9.7
Risk
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-4w17-m7f2-9fek
Aliases:
CVE-2022-43685
PYSEC-2022-42987
CKAN through 2.9.6 account takeovers by unauthenticated users when an existing user id is sent via an HTTP POST request. This allows a user to take over an existing account including superuser accounts.
2.9.7
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-02T04:18:02.151939+00:00 Pypa Importer Affected by VCID-4w17-m7f2-9fek https://github.com/pypa/advisory-database/blob/main/vulns/ckan/PYSEC-2022-42987.yaml 38.6.0