Read the docs

lektor

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

lektor records in CISA KEV

No lektor vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-85957 CVE-2026-123619 · GHSA-9pg5-8hpj-vq4p

Lektor Path Traversal via Admin API Drive-Letter Paths on Windows

Priority MEDIUM 60

Lektor through 3.3.14 and 3.4.0b15 contains an absolute path traversal vulnerability in the admin API on Windows that allows attackers to escape the project directory by supplying drive-letter paths that cleanup_path doe…

CVSS 4.0MEDIUM 5.9 Network No auth User interaction EPSS 0.00467 Published 2026-11-06 No fix listed CWE-36
TI-2026-65775 CVE-2026-104059 · GHSA-76hh-mx5x-4xrx

Lektor 3.3.14 CSRF via Admin API Endpoints

Priority LOW 30

Lektor 3.3.14 and 3.4.0b15 contains a cross-site request forgery vulnerability in the admin API blueprint that allows unauthenticated attackers to perform state-changing actions by sending cross-origin requests without C…

CVSS 4.0HIGH 7.0 Network No auth User interaction EPSS 0.0014 Published 2026-10-01 No fix listed CWE-352
Open these records in search →