Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/ckan@2.8.10
purl pkg:pypi/ckan@2.8.10
Next non-vulnerable version 2.9.7
Latest non-vulnerable version 2.11.4
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-w6cg-ubux-qbfg
Aliases:
CVE-2022-43685
GHSA-m2xp-jxfg-qq6g
PYSEC-2022-42987
CKAN through 2.9.6 account takeovers by unauthenticated users when an existing user id is sent via an HTTP POST request. This allows a user to take over an existing account including superuser accounts.
2.9.7
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-05-31T09:44:33.130250+00:00 PyPI Importer Affected by VCID-w6cg-ubux-qbfg https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-30T20:31:03.465765+00:00 Pypa Importer Affected by VCID-w6cg-ubux-qbfg https://github.com/pypa/advisory-database/blob/main/vulns/ckan/PYSEC-2022-42987.yaml 38.6.0