Search for packages
| purl | pkg:pypi/mayan-edms@2.2b3 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 2.8 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
PYSEC-2023-276
Aliases: CVE-2022-47419 GHSA-5m6v-2xgf-qhrw |
An XSS vulnerability was discovered in the Mayan EDMS DMS. Successful XSS exploitation was observed in the in-product tagging system. |
Vulnerable |
|
PYSEC-2018-14
Aliases: CVE-2018-16406 GHSA-5r76-cjf4-c9qx |
An issue was discovered in Mayan EDMS before 3.0.2. The Cabinets app has XSS via a crafted cabinet label. |
Vulnerable |
|
PYSEC-2018-15
Aliases: CVE-2018-16407 GHSA-5h6m-9mvx-m6c5 |
An issue was discovered in Mayan EDMS before 3.0.3. The Tags app has XSS because tag label values are mishandled. |
Vulnerable |
|
PYSEC-2018-106
Aliases: CVE-2018-16405 GHSA-fpcv-j2q9-vqhw PYSEC-2018-16 |
An issue was discovered in Mayan EDMS before 3.0.2. The Appearance app sets window.location directly, leading to XSS. |
Vulnerable |
|
GHSA-x37w-7p52-8f49
Aliases: CVE-2025-14692 |
Mayan EDMS has an Open Redirect through the /authentication/ file A flaw has been found in Mayan EDMS up to … |
Vulnerable |
|
GHSA-774q-r975-vqwp
Aliases: CVE-2025-14691 |
Mayan EDMS is vulnerable to XSS through the /authentication/ file A vulnerability was detected in Mayan EDMS up to 4.10.1. … |
Vulnerable |
|
PYSEC-2014-110
Aliases: CVE-2014-3840 GHSA-wpvx-26f7-65q3 |
Multiple cross-site scripting (XSS) vulnerabilities in apps/common/templates/calculate_form_title.html in Mayan EDMS 0.13 allow remote authenticated users to inject arbitrary web script … | There are no reported fixed by versions. |
|
PYSEC-2025-135
Aliases: CVE-2025-14692 GHSA-x37w-7p52-8f49 |
A flaw has been found in Mayan EDMS up to 4.10.1. The impacted element is an unknown function of the … |
Vulnerable |
|
PYSEC-2025-134
Aliases: CVE-2025-14691 GHSA-774q-r975-vqwp |
A vulnerability was detected in Mayan EDMS up to 4.10.1. The affected element is an unknown function of the file … |
Vulnerable |
|
PYSEC-2014-110
Aliases: CVE-2014-3840 GHSA-wpvx-26f7-65q3 |
Multiple cross-site scripting (XSS) vulnerabilities in apps/common/templates/calculate_form_title.html in Mayan EDMS 0.13 allow remote authenticated users to inject arbitrary web script … | There are no reported fixed by versions. |
|
CVE-2014-3840
Aliases: GHSA-wpvx-26f7-65q3 |
Mayan EDMS multiple cross-site scripting (XSS) vulnerabilities Multiple cross-site scripting (XSS) vulnerabilities in apps/common/templates/calculate_form_title.html in Mayan EDMS 0.13 allow remote … | There are no reported fixed by versions. |