Advisories · Technology

OWASP DefectDojo.

Every CVE that names OWASP DefectDojo among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-16764 CVE record

CVSS 5.3 Medium

OWASP DefectDojo API/Web serializers.py UserSerializer privileges management
- OWASP DefectDojo
- Privilege escalation
Not analysed yet 23 Jul 2026
CVE-2026-3816 CVE record

CVSS 5.3 Medium

OWASP DefectDojo SonarQubeParser/MSDefenderParser parser.py input_zip.read denial of service
- OWASP DefectDojo
- Denial of service
Not analysed yet 9 Mar 2026