Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/mayan-edms@3.4.5
purl pkg:pypi/mayan-edms@3.4.5
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 2.8
Vulnerabilities affecting this package (8)
Advisory Summary Fixed in package version
PYSEC-2023-276
Aliases:
CVE-2022-47419
GHSA-5m6v-2xgf-qhrw
An XSS vulnerability was discovered in the Mayan EDMS DMS. Successful XSS exploitation was observed in the in-product tagging system.
4.3.6
Vulnerable
GHSA-x37w-7p52-8f49
Aliases:
CVE-2025-14692
Mayan EDMS has an Open Redirect through the /authentication/ file A flaw has been found in Mayan EDMS up to …
4.6.12
Vulnerable
GHSA-774q-r975-vqwp
Aliases:
CVE-2025-14691
Mayan EDMS is vulnerable to XSS through the /authentication/ file A vulnerability was detected in Mayan EDMS up to 4.10.1. …
4.6.12
Vulnerable
PYSEC-2014-110
Aliases:
CVE-2014-3840
GHSA-wpvx-26f7-65q3
Multiple cross-site scripting (XSS) vulnerabilities in apps/common/templates/calculate_form_title.html in Mayan EDMS 0.13 allow remote authenticated users to inject arbitrary web script … There are no reported fixed by versions.
PYSEC-2025-135
Aliases:
CVE-2025-14692
GHSA-x37w-7p52-8f49
A flaw has been found in Mayan EDMS up to 4.10.1. The impacted element is an unknown function of the …
4.10.2
Vulnerable
PYSEC-2025-134
Aliases:
CVE-2025-14691
GHSA-774q-r975-vqwp
A vulnerability was detected in Mayan EDMS up to 4.10.1. The affected element is an unknown function of the file …
4.10.2
Vulnerable
PYSEC-2014-110
Aliases:
CVE-2014-3840
GHSA-wpvx-26f7-65q3
Multiple cross-site scripting (XSS) vulnerabilities in apps/common/templates/calculate_form_title.html in Mayan EDMS 0.13 allow remote authenticated users to inject arbitrary web script … There are no reported fixed by versions.
CVE-2014-3840
Aliases:
GHSA-wpvx-26f7-65q3
Mayan EDMS multiple cross-site scripting (XSS) vulnerabilities Multiple cross-site scripting (XSS) vulnerabilities in apps/common/templates/calculate_form_title.html in Mayan EDMS 0.13 allow remote … There are no reported fixed by versions.
This package is not known to fix any advisories.