django-mdeditor vulnerabilities

CVEs whose affected-version data names the django-mdeditor package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-13030High· 7.1

6mo ago

All versions of the package django-mdeditor are vulnerable to Missing Authentication for Critical Function in the image upload endpoint

All versions of the package django-mdeditor are vulnerable to Missing Authentication for Critical Function in the image upload endpoint. An attacker can upload malicious files and achieve arbitrary code execution since this endpoint lack…

▾ Twilightpylixm · django-mdeditorEPSS 0.31%via NVD