What’s Vulnerable › Products

daptin vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your daptin version is affected

Latest daptin vulnerabilities

• CVE-2026-62160 — Daptin: ParseAcceptLanguage `_` separator bypass enables >250x CPU amplification via Accept-Language header in LanguageMiddleware (CVSS 8.7)
• CVE-2026-72575 — daptin - Authentication Bypass via Null Owner Permission Check on usergroup Objects (CVSS 9.1)
• CVE-2026-44349 — Daptin fuzzy search injects unvalidated column name into raw SQL (CVSS 7.1)
• CVE-2026-41422 — Daptin vulnerable to SQL injection via unvalidated goqu.L() calls in aggregate API (CVSS 8.3)