Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: viewcomponent Clear
ID Title
CVE-2026-54497 Vulnerability in view_component (CVE-2026-54497)
vulnerability in view_component (CVE-2026-54497). Confidential information can be exposed externally. Exploitable via `Host header`. Mitigation: upgrade to `4.12.0` or later.
CVE-2026-54498 Cross-Site Scripting (XSS) in view_component (CVE-2026-54498)
cross-site scripting in view_component (CVE-2026-54498). Confidential information can be exposed externally. Exploitable via ``around_render``. Mitigation: upgrade to `4.12.0` or later.
CVE-2026-44837 Vulnerability in view_component (CVE-2026-44837)
vulnerability in view_component (CVE-2026-44837). Confidential information can be exposed externally. Exploitable via `GET /_system_test_entrypoint`. Mitigation: upgrade to `4.9.0` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →