DataGerry vulnerabilities

CVEs whose affected-version data names the DataGerry package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-57853High· 8.8

3d ago

DataGerry < 3.3.0 SSTI via DocAPI Template Rendering

DataGerry before 3.3.0 contains a server-side template injection vulnerability that allows authenticated attackers with base.docapi.template.add permission to store arbitrary Jinja2 payloads in the template_data field via POST /rest/doca…

▾ TwilightDataGerry · DataGerryEPSS 0.55%via CVEORG