Daptin

4 CVEs in 1 Daptin product, including Daptin. Newest: CVE-2026-62160 (2026-10-30). Severity, EPSS and public exploits for each.

Daptin products with known CVEs

ProductCVEs
Daptin4
Daptin CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-621602026-10-30Daptin is a GraphQL/JSON-API headless CMS. Prior to 0.12.26, the global `LanguageMiddleware` in `server/language.go` passes the raw `Accept-Language` header fr…
CVE-2026-72575Critical9.12026-08-10An improper authorization vulnerability in daptin through v0.12.34 allows unauthenticated remote attackers to read, create, update, and delete usergroup record…
CVE-2026-443492026-05-07Daptin is a GraphQL/JSON-API headless CMS. Prior to version 0.11.5, processFuzzySearch in server/resource/resource_findallpaginated.go:1484 splits the user-sup…
CVE-2026-41422High8.32026-05-07Daptin is a GraphQL/JSON-API headless CMS. Prior to version 0.11.4, the /aggregate/:typename endpoint accepted column and group query parameters that were pass…