QGIS vulnerabilities

CVEs whose affected-version data names the QGIS package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-104140Medium· 6.1PoC

3w ago

QGIS is a free, open source, cross-platform geographic information system

QGIS is a free, open source, cross-platform geographic information system. Prior to 3.44.12 and 4.0.0 through 4.2.3, QGIS Server renders feature data in WFS3 (OGC API Features) HTML responses without HTML escaping. Attacker-controlled fe…

▾ Twilightqgis · QGISEPSS 0.24%via NVD