What’s Vulnerable › Products

OWASP DefectDojo vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your OWASP DefectDojo version is affected

Latest OWASP DefectDojo vulnerabilities

• CVE-2026-16764 — OWASP DefectDojo API/Web serializers.py UserSerializer privileges management (CVSS 6.3)
• CVE-2026-3816 — OWASP DefectDojo SonarQubeParser/MSDefenderParser parser.py input_zip.read denial of service (CVSS 6.5)
• CVE-2023-48171 — (CVSS 8.8)