Known vulnerabilities in Wekan

Vendor: wekan.github.io
Website: https://wekan.github.io/
Total Security Bulletins: 16

Security bulletins (16)

Secuity bulletin Severity Status Published
SB2026072866: NULL pointer dereference in Wekan Low
Patched
28.07.2026
SB2026072865: Server-Side Request Forgery (SSRF) in Wekan Low
Patched
28.07.2026
SB2026072864: Missing Authorization in Wekan Low
Patched
28.07.2026
SB2026072863: OS Command Injection in Wekan Medium
Patched
28.07.2026
SB2026072862: Multiple vulnerabilities in Wekan High
Patched
28.07.2026
SB2026072860: Cross-site scripting in Wekan Low
Patched
28.07.2026
SB2026072859: Path traversal in Wekan Low
Patched
28.07.2026
SB2026072858: Authorization bypass through user-controlled key in Wekan Low
Patched
28.07.2026
SB2026072857: Authorization bypass through user-controlled key in Wekan Medium
Patched
28.07.2026
SB2026072856: Authentication Bypass by Spoofing in Wekan High
Patched
28.07.2026
SB2026072855: Incorrect authorization in Wekan Low
Patched
28.07.2026
SB2026072854: Multiple vulnerabilities in Wekan Medium
Patched
28.07.2026
SB2026072853: OS Command Injection in Wekan Medium
Patched
28.07.2026
SB2026072852: Incorrect authorization in Wekan Medium
Patched
28.07.2026
SB2026072851: Arbitrary file upload in Wekan Medium
Patched
28.07.2026
SB2021021004: Cross-site scripting in Wekan Low
Patched
10.02.2021