CVE-2025-54384 | CKAN up to 2.10.8/2.11.3 helpers.markdown_extract cross site scripting (GHSA-2r4h-8jxv-w2j8)

October 29, 2025 Yanac

A vulnerability marked as problematic has been reported in CKAN up to 2.10.8/2.11.3. Affected is the function helpers.markdown_extract. This manipulation causes cross site scripting.

The identification of this vulnerability is CVE-2025-54384. It is possible to initiate the attack remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More