LMFDB vulnerabilities

CVEs whose affected-version data names the LMFDB package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-123198Critical· 9.8PoC

2d ago

LMFDB before commit 01829bd Unauthenticated Server-Side Template Injection via /knowledge/render/<ID>

LMFDB before commit 01829bd contains a server-side template injection vulnerability in the render_knowl function that allows unauthenticated attackers to inject Jinja expressions via request parameters. Attackers can supply crafted query…

▾ AbyssalLMFDB · LMFDBEPSS 0.84%via CVEORG