Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/octoprint@1.11.4
purl pkg:pypi/octoprint@1.11.4
Next non-vulnerable version 1.11.8
Latest non-vulnerable version 2.0.0rc3
Risk score 3.1
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
PYSEC-2026-1716
Aliases:
CVE-2026-23892
GHSA-xg4x-w2j3-57h6
OctoPrint has Timing Side-Channel Vulnerability in API Key Authentication ### Impact OctoPrint versions up to and including 1.11.5 are affected …
1.11.6
Vulnerable
PYSEC-2026-2687
Aliases:
CVE-2026-54134
GHSA-j4h9-pm27-4rfw
OctoPrint has possible file exfiltration via query parameters on upload endpoints ### Impact OctoPrint versions up until and including 1.11.7 …
1.11.8
Not vulnerable
2.0.0rc3
Not vulnerable
PYSEC-2026-2688
Aliases:
CVE-2026-35163
GHSA-p6qx-ghxm-389h
OctoPrint has XSS in its Suppressed Command Notifications ### Impact OctoPrint versions up to and including 1.11.7 as well as …
1.11.8
Not vulnerable
2.0.0rc3
Not vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
PYSEC-2026-1714
OctoPrint vulnerable to XSS in Action Commands Notification and Prompt ### Impact OctoPrint versions up to and including 1.11.3 are … CVE-2025-64187
GHSA-crvm-xjhm-9h29