MEDIUM 5.3

PYSEC-2026-150

상세

Wagtail is an open source content management system built on Django. Prior to 7.0.7, 7.3.2, and 7.4, the Documents and Images API incorrectly listed items in private collections. A user with access to the API could see the filename and name of documents and images in private collections. This vulnerability is fixed in 7.0.7, 7.3.2, and 7.4.

이 버전이 영향받나요?

사용 중인 패키지 버전을 입력하면 즉시 평가합니다.

영향 패키지

PyPI / wagtail

최초 영향 버전: 0 수정 버전: 7.0.7

수정 pip install --upgrade 'wagtail>=7.0.7'

참고

https://github.com/wagtail/wagtail/security/advisories/GHSA-p5gm-92h4-6pv6 [ADVISORY]