CTFd vulnerabilities

CVEs whose affected-version data names the CTFd package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-121562Medium· 5.3

5d ago

CTFd 3.1.0 before 3.8.7 Information Disclosure via /api/v1/teams Endpoint

CTFd 3.1.0 before 3.8.7 contains an information disclosure vulnerability in the /api/v1/teams list endpoint that exposes non-public team custom field values. Unauthenticated attackers can paginate GET requests to collect hidden registrat…

▾ SunlitCTFd · CTFdEPSS 0.33%via CVEORG