Staging Environment: Content and features may be unstable or change without notice.

Advisory Package Curation

CVE-2024-41674

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-2rqw-cfhc-35fh

CKAN may leak Solr credentials via error message in package_search action If there were connection issues with the Solr server, the internal Solr URL (potentially including credentials) could be leaked to `package_search` calls as part of the returned error message ### Patches This has been patched in CKAN 2.10.5 and 2.11.0

gitlab/pypi/ckan/CVE-2024-41674

CKAN may leak Solr credentials via error message in package_search action If there were connection issues with the Solr server, the internal Solr URL (potentially including credentials) could be leaked to `package_search` calls as part of the returned error message

pypa/ckan/PYSEC-2026-1248

CKAN may leak Solr credentials via error message in package_search action If there were connection issues with the Solr server, the internal Solr URL (potentially including credentials) could be leaked to `package_search` calls as part of the returned error message ### Patches This has been patched in CKAN 2.10.5 and 2.11.0

pysec/PYSEC-2026-1248

CKAN may leak Solr credentials via error message in package_search action If there were connection issues with the Solr server, the internal Solr URL (potentially including credentials) could be leaked to `package_search` calls as part of the returned error message ### Patches This has been patched in CKAN 2.10.5 and 2.11.0