Nixpkgs security tracker

Login with GitHub

Suggestions search

All statuses

Filter by:

With package: python313Packages.wagtail-factories

Found 1 matching suggestions

View:

Compact

Detailed

Untriaged

Permalink CVE-2026-55468

4.3 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): Low (L)
Integrity (I): None (N)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): Low (L)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): None (N)

created 2 weeks, 6 days ago Activity log

Created suggestion 2 weeks, 6 days ago

Wagtail: Improper restriction handling on Pages admin API

Wagtail is an open source content management system built on Django. Prior to versions 7.0.9, 7.3.4, 7.4.3, and 8.0rc2 on their respective release lines, the internal Pages admin API returns page fields declared in api_fields without sufficient access control, allowing a user with Wagtail admin access to retrieve restricted draft and live page content. This issue is fixed in versions 7.0.9, 7.3.4, 7.4.3, and 8.0rc2.

References

https://github.com/wagtail/wagtail/security/advisories/GHSA-3vrh-m9w7-v94f x_refsource_CONFIRM
https://github.com/wagtail/wagtail/commit/5608cfb714a130412f862beab53c78de02b79975 x_refsource_MISC
https://github.com/wagtail/wagtail/commit/aef935530d5289406ca325b42747af15f3b28ac4 x_refsource_MISC
https://github.com/wagtail/wagtail/commit/d99d2bec2b0aca46d88014416432c717240cd559 x_refsource_MISC
https://github.com/wagtail/wagtail/commit/e2fa629b7a51ec29d59e45eead930feee0d3c4b3 x_refsource_MISC

Affected products

wagtail

==>= 7.4, < 7.4.3
==>= 7.1, < 7.3.4
==>= 8.0rc1, < 8.0rc2
==< 7.0.9

Matching in nixpkgs

pkgs.python313Packages.wagtail

Django content management system focused on flexibility and user experience

nixos-unstable 7.4.1
- nixpkgs-unstable 7.4.2
- nixos-unstable-small 7.4.2
nixos-26.05 7.4.1
- nixos-26.05-small 7.4.1
- nixpkgs-26.05-darwin 7.4.1

pkgs.python314Packages.wagtail

Django content management system focused on flexibility and user experience

nixos-unstable 7.4.1
- nixpkgs-unstable 7.4.2
- nixos-unstable-small 7.4.2
nixos-26.05 7.4.1
- nixos-26.05-small 7.4.1
- nixpkgs-26.05-darwin 7.4.1

pkgs.python313Packages.wagtail-localize

Translation plugin for Wagtail CMS

nixos-unstable 1.13.1
- nixpkgs-unstable 1.13.1
- nixos-unstable-small 1.14.5
nixos-26.05 1.13.1
- nixos-26.05-small 1.13.1
- nixpkgs-26.05-darwin 1.13.1

pkgs.python314Packages.wagtail-localize

Translation plugin for Wagtail CMS

nixos-unstable 1.13.1
- nixpkgs-unstable 1.13.1
- nixos-unstable-small 1.14.5
nixos-26.05 1.13.1
- nixos-26.05-small 1.13.1
- nixpkgs-26.05-darwin 1.13.1

pkgs.python313Packages.wagtail-factories

Factory boy classes for wagtail

nixos-unstable 4.5.0
- nixpkgs-unstable 4.5.0
- nixos-unstable-small 4.5.0
nixos-26.05 4.4.0
- nixos-26.05-small 4.4.0
- nixpkgs-26.05-darwin 4.4.0

pkgs.python314Packages.wagtail-factories

Factory boy classes for wagtail

nixos-unstable 4.5.0
- nixpkgs-unstable 4.5.0
- nixos-unstable-small 4.5.0
nixos-26.05 4.4.0
- nixos-26.05-small 4.4.0
- nixpkgs-26.05-darwin 4.4.0

pkgs.python313Packages.wagtail-modeladmin

Add any model in your project to the Wagtail admin. Formerly wagtail.contrib.modeladmin

nixos-unstable 2.4.0
- nixpkgs-unstable 2.4.0
- nixos-unstable-small 2.4.0
nixos-26.05 2.3.0
- nixos-26.05-small 2.3.0
- nixpkgs-26.05-darwin 2.3.0

pkgs.python314Packages.wagtail-modeladmin

Add any model in your project to the Wagtail admin. Formerly wagtail.contrib.modeladmin

nixos-unstable 2.4.0
- nixpkgs-unstable 2.4.0
- nixos-unstable-small 2.4.0
nixos-26.05 2.3.0
- nixos-26.05-small 2.3.0
- nixpkgs-26.05-darwin 2.3.0

Package maintainers

@sephii Sylvain Fankhauser <sephi@fhtagn.top>

1