Homepage

mediawiki vulnerabilities

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the mediawiki package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • L
CVE-2025-11261

<1:1.43.5+dfsg-1
  • L
CVE-2025-61656

<1:1.43.5+dfsg-1
  • L
CVE-2025-61657

<1:1.43.5+dfsg-1
  • L
CVE-2025-61654

<1:1.43.5+dfsg-1
  • L
CVE-2025-61655

<1:1.43.5+dfsg-1
  • L
CVE-2025-61638

<1:1.43.5+dfsg-1
  • L
CVE-2025-11175

<1:1.43.5+dfsg-1
  • L
CVE-2025-11173

<1:1.43.5+dfsg-1
  • L
CVE-2025-61637

<1:1.43.5+dfsg-1
  • L
CVE-2025-61652

<1:1.43.5+dfsg-1
  • L
CVE-2025-61640

<1:1.43.5+dfsg-1
  • L
CVE-2025-61653

<1:1.43.5+dfsg-1
  • L
CVE-2025-61642

<1:1.43.5+dfsg-1
  • L
CVE-2025-61646

<1:1.43.5+dfsg-1
  • L
CVE-2025-61641

<1:1.43.5+dfsg-1
  • L
CVE-2025-61636

<1:1.43.5+dfsg-1
  • L
CVE-2025-61634

<1:1.43.5+dfsg-1
  • L
CVE-2025-61639

<1:1.43.5+dfsg-1
  • L
CVE-2025-61643

<1:1.43.5+dfsg-1
  • L
CVE-2025-61635

<1:1.43.5+dfsg-1
  • L
CVE-2025-6595

<1:1.43.3+dfsg-1
  • L
CVE-2025-32698

<1:1.43.1+dfsg-1
  • L
CVE-2025-6594

<1:1.43.3+dfsg-1
  • L
CVE-2025-6927

<1:1.43.3+dfsg-1
  • L
CVE-2025-3469

<1:1.43.1+dfsg-1
  • M
Incorrect Permission Assignment for Critical Resource

<1:1.39.5-1
  • L
CVE-2025-6597

<1:1.43.3+dfsg-1
  • L
CVE-2025-32699

<1:1.43.1+dfsg-1
  • C
CVE-2023-29141

<1:1.39.4-1
  • H
Cross-site Scripting (XSS)

<1:1.39.5-1
  • M
Cross-site Scripting (XSS)

<1:1.35.7-1
  • M
Uncontrolled Recursion

<1:1.35.6-1
  • M
CVE-2022-41767

<1:1.35.8-1
  • H
Release of Invalid Pointer or Reference

<1:1.35.6-1
  • H
Incorrect Default Permissions

<1:1.35.5-1
  • M
Cross-site Scripting (XSS)

<1:1.39.6-1
  • M
Information Exposure

<1:1.35.5-1
  • M
Cross-site Scripting (XSS)

<1:1.35.2-1
  • L
CVE-2025-6593

<1:1.43.3+dfsg-1
  • L
CVE-2025-32700

<1:1.43.1+dfsg-1
  • H
Improper Cross-boundary Removal of Sensitive Data

<1:1.35.7-1
  • L
CVE-2025-6590

<1:1.43.3+dfsg-1
  • L
CVE-2025-32072

<1:1.43.1+dfsg-2
  • L
CVE-2025-6926

<1:1.43.3+dfsg-1
  • L
CVE-2023-45361

<1:1.39.5-1
  • M
CVE-2022-34912

<1:1.35.7-1
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

<1:1.35.2-1
  • M
Exposure of Resource to Wrong Sphere

<1:1.35.2-1
  • H
Improper Encoding or Escaping of Output

<1:1.35.1-1
  • M
Cross-site Scripting (XSS)

<1:1.35.0-1
  • M
Incorrect Permission Assignment for Critical Resource

<1:1.39.1-1
  • M
Cross-site Scripting (XSS)

<1:1.35.4-1
  • H
CVE-2019-12473

<1:1.31.2-1
  • H
Cross-site Request Forgery (CSRF)

<1:1.31.2-1
  • M
Cross-site Scripting (XSS)

<1:1.35.1-1
  • H
CVE-2019-12472

<1:1.31.2-1
  • M
Improper Privilege Management

<1:1.31.1-1
  • H
CVE-2021-27291

<1:1.35.2-1
  • M
Cross-site Scripting (XSS)

<1:1.35.0-1
  • M
Cross-site Scripting (XSS)

<1:1.31.2-1
  • M
Cross-site Scripting (XSS)

<1:1.35.5-1
  • M
Improper Input Validation

<1:1.27.2-1
  • M
Allocation of Resources Without Limits or Throttling

<1:1.35.4-1
  • M
CVE-2021-30159

<1:1.35.2-1
  • M
Missing Authorization

<1:1.35.2-1
  • M
Improper Input Validation

<1:1.27.2-1
  • M
Cross-site Scripting (XSS)

<1:1.27.1-1
  • M
Cross-site Scripting (XSS)

<1:1.27.1-1
  • M
Missing Authorization

<1:1.35.5-1
  • L
Cross-site Request Forgery (CSRF)

<1:1.25.5-1
  • M
Improper Encoding or Escaping of Output

<1:1.31.7-1
  • M
Cross-site Scripting (XSS)

<1:1.19.20+dfsg-2.3
  • M
Cross-site Scripting (XSS)

<1:1.31.2-1
  • M
Cross-site Scripting (XSS)

<1:1.19.20+dfsg-2.3
  • M
Open Redirect

<1:1.27.2-1
  • M
Cross-site Scripting (XSS)

<1:1.19.20+dfsg-2.3
  • M
CVE-2019-12467

<1:1.31.2-1
  • H
Cross-site Request Forgery (CSRF)

<1:1.25.5-1
  • M
Open Redirect

<1:1.31.6-1
  • L
Resource Management Errors

<1:1.19.20+dfsg-2.3
  • L
Improper Access Control

<1:1.25.5-1
  • M
Cross-site Scripting (XSS)

<1:1.35.1-1
  • M
Cross-site Request Forgery (CSRF)

<1:1.19.20+dfsg-2.3
  • M
Improper Authentication

<1:1.31.1-1
  • H
Information Exposure

<1:1.27.4-1
  • M
Information Exposure

<1:1.31.4-1
  • M
Cross-site Request Forgery (CSRF)

<1:1.19.18+dfsg-0.1
  • H
Use of Hard-coded Credentials

<1:1.19.2-1
  • M
Cross-site Scripting (XSS)

<1:1.19.2-1
  • M
CVE-2017-8812

<1:1.27.4-1
  • M
Cross-site Scripting (XSS)

<1:1.19.20+dfsg-2.3
  • L
CVE-2025-6592

<1:1.43.3+dfsg-1
  • M
Information Exposure

<1:1.25.5-1
  • M
Cross-site Scripting (XSS)

<1:1.19.19+dfsg-1
  • C
Arbitrary Code Injection

<1:1.27.3-1
  • L
CVE-2025-32697

<1:1.43.1+dfsg-1
  • L
CVE-2025-6589

<1:1.43.3+dfsg-1
  • M
Improper Input Validation

<1:1.27.2-1
  • L
CVE-2025-6596

<1:1.43.3+dfsg-1
  • M
Access Restriction Bypass

<1:1.19.8+dfsg-1
  • M
Improper Access Control

<1:1.27.1-1
  • H
Information Exposure

<1:1.27.2-1
  • L
Cross-site Scripting (XSS)

<1:1.19.8+dfsg-1
  • L
CVE-2012-4885

<1:1.19.0-1
  • L
Access Restriction Bypass

<1:1.19.6-1
  • H
Improper Cross-boundary Removal of Sensitive Data

<1:1.35.7-1
  • L
Cross-site Scripting (XSS)

<1:1.13.2-1
  • L
Cross-site Scripting (XSS)

<1:1.25.5-1
  • H
Improper Cross-boundary Removal of Sensitive Data

<1:1.35.7-1
  • M
Resource Management Errors

<1:1.25.5-1
  • M
Race Condition

<1:1.19.12+dfsg-1
  • L
Cross-site Scripting (XSS)

<1:1.19.20+dfsg-2.3
  • H
Incorrect Authorization

<1:1.35.4-1
  • L
CVE-2023-45359

<1:1.39.5-1
  • C
Missing Authentication for Critical Function

<1:1.31.2-1
  • M
Arbitrary Code Injection

<1.7.1-9
  • M
Cross-site Scripting (XSS)

<1:1.35.2-1
  • L
CVE-2025-6591

<1:1.43.3+dfsg-1
  • H
Allocation of Resources Without Limits or Throttling

<1:1.35.4-1
  • H
Arbitrary Command Injection

<1:1.19.20+dfsg-2.1
  • M
Incorrect Default Permissions

<1:1.15.5-4
  • M
Improper Input Validation

<1:1.35.1-1
  • L
Information Exposure

<1:1.15.5-1
  • M
Cross-site Scripting (XSS)

<1:1.35.0-1
  • L
CVE-2025-32696

<1:1.43.1+dfsg-1
  • L
CVE-2024-47913

<1:1.39.10-1
  • L
Access Restriction Bypass

<1:1.13.3-1
  • H
Session Fixation

<1:1.19.8+dfsg-2.2
  • L
Cross-site Scripting (XSS)

<1:1.15.4-1
  • H
Exposure of Resource to Wrong Sphere

<1:1.35.3-1
  • M
CVE-2023-45362

<1:1.39.5-1
  • M
Cross-site Scripting (XSS)

<1:1.19.12+dfsg-1
  • M
Cross-site Scripting (XSS)

<1:1.39.4-1
  • M
Cross-site Scripting (XSS)

<1:1.19.2-1
  • M
Information Exposure

<1:1.11.2-1
  • M
Access Restriction Bypass

<1:1.15.5-9
  • H
Improper Input Validation

<1:1.27.4-1
  • H
Improper Access Control

<1:1.19.2-1
  • M
Information Exposure

<1:1.35.8-1
  • H
Information Exposure

<1:1.35.7-1
  • M
Cross-site Scripting (XSS)

<1:1.27.4-1
  • L
CVE-2006-0322

<1.4.15-1
  • M
CVE-2005-4501

<1.4.13-1
  • M
Cross-site Scripting (XSS)

<1:1.35.6-1
  • M
Open Redirect

<1:1.27.2-1
  • H
Improper Access Control

<1:1.27.1-1
  • M
Improper Check for Unusual or Exceptional Conditions

<1:1.35.5-1
  • M
CVE-2005-1888

<1.4.9
  • L
Cross-site Scripting (XSS)

<1.10.2-1
  • M
Incorrect Default Permissions

<1:1.27.2-1
  • M
Cross-site Scripting (XSS)

<1:1.27.2-1
  • M
Cross-site Scripting (XSS)

<1:1.35.2-1
  • M
CVE-2005-3167

<1.4.11-1
  • H
Improper Access Control

<1:1.27.1-1
  • M
Information Exposure

<1:1.35.1-1
  • H
Information Exposure

<1:1.27.1-1
  • H
CVE-2019-12474

<1:1.31.2-1
  • M
Cross-site Scripting (XSS)

<1:1.35.0-1
  • M
Improper Input Validation

<1:1.15.5-5
  • M
Cross-site Scripting (XSS)

<1:1.25.5-1
  • M
Information Exposure

<1:1.19.20+dfsg-2.3
  • L
Cross-site Scripting (XSS)

<1:1.11.1-1
  • M
Resource Management Errors

<1:1.19.20+dfsg-2.3
  • L
Access Restriction Bypass

<1:1.15.2-1
  • M
Cross-site Scripting (XSS)

<1:1.19.20+dfsg-2.3
  • M
Missing Authorization

<1:1.31.2-1
  • M
Cross-site Scripting (XSS)

<1:1.35.1-1
  • M
Access Restriction Bypass

<1:1.25.5-1
  • C
Arbitrary Code Injection

<1:1.27.4-1
  • M
Information Exposure Through Log Files

<1:1.31.1-1
  • M
CVE-2005-0534

<1.4.9
  • M
CVE-2005-3165

<1.4.9
  • M
Information Exposure

<1:1.19.10+dfsg-1
  • M
CVE-2005-0536

<1.4.9
  • M
CVE-2013-2114

<1:1.19.7+dfsg-1
  • H
Improper Input Validation

<1:1.27.4-1
  • L
Cross-site Scripting (XSS)

<1:1.19.20+dfsg-2.2
  • H
CVE-2004-1405

<1.4.9
  • M
Information Exposure

<1:1.19.2-1
  • L
Cross-site Request Forgery (CSRF)

<1:1.25.5-1
  • M
Improper Access Control

<1:1.19.2-1
  • M
Information Exposure

<1:1.25.5-1
  • M
Resource Management Errors

<1:1.25.5-1
  • L
Credentials Management

<1:1.25.5-1
  • M
CVE-2023-36674

<1:1.39.4-1
  • L
Information Exposure

<1:1.25.5-1
  • L
CVE-2024-34506

<1:1.39.7-1
  • M
Cross-site Scripting (XSS)

<1:1.15.5-9
  • L
Improper Access Control

<1:1.25.5-1
  • M
Cross-site Scripting (XSS)

<1:1.19.10+dfsg-1
  • M
Improper Input Validation

<1:1.19.11+dfsg-1
  • M
Cross-site Scripting (XSS)

<1:1.19.1-1
  • M
CVE-2012-5391

<1:1.19.3-1
  • M
Cross-site Scripting (XSS)

<1:1.15.5-5
  • H
Reliance on Cookies without Validation and Integrity Checking

<1:1.35.7-1
  • L
CVE-2024-34507

<1:1.39.7-1
  • M
Information Exposure

<1:1.15.5-4
  • L
Cross-site Scripting (XSS)

<1:1.19.16+dfsg-1
  • M
Cross-site Scripting (XSS)

<1:1.39.5-1
  • M
Improper Authentication

<1:1.19.14+dfsg-1
  • L
Cross-site Request Forgery (CSRF)

<1:1.15.4-1
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

<1:1.39.5-1
  • H
Improper Input Validation

<1:1.19.10+dfsg-1
  • M
Cross-site Scripting (XSS)

<1:1.19.10+dfsg-1
  • L
Cross-site Scripting (XSS)

<1:1.15.0-1.1
  • M
Cross-site Scripting (XSS)

<1:1.19.6-1
  • L
Information Exposure

<1:1.13.3-1
  • M
Improper Authentication

<1:1.35.2-1
  • M
Cross-site Scripting (XSS)

<1:1.15.5-5
  • L
Information Exposure

<1:1.15.5-6
  • M
Incorrect Permission Assignment for Critical Resource

<1:1.35.2-1
  • M
Cross-site Request Forgery (CSRF)

<1:1.13.3-1
  • L
Cross-site Scripting (XSS)

<1:1.13.3-1
  • M
CVE-2021-44854

<1:1.35.5-1
  • M
CVE-2006-1498

<1.4.15-1
  • H
Information Exposure

<1:1.19.4-1
  • H
CVE-2005-0535

<1.4.9
  • M
CVE-2005-3166

<1.4.11-1
  • L
Information Exposure

<1:1.31.8-1
  • L
Cross-site Scripting (XSS)

<1:1.15.5-3
  • M
CVE-2007-0177

<1.7.1-6
  • M
CVE-2020-25813

<1:1.35.0-1
  • L
Improper Input Validation

<1:1.15.2-1
  • L
Inefficient Regular Expression Complexity

<1:1.39.4-1
  • M
Missing Authorization

<1:1.31.2-1
  • M
Improper Input Validation

<1:1.15.5-2
  • H
Improper Restriction of Excessive Authentication Attempts

<1:1.35.0-1
  • M
Improper Input Validation

<1:1.27.4-1
  • L
Cross-site Scripting (XSS)

<1:1.14.0-1
  • M
Cross-site Scripting (XSS)

<1:1.13.3-1
  • L
CVE-2007-0894

<1:1.10
  • H
Cross-site Request Forgery (CSRF)

<1:1.27.2-1
  • H
CVE-2017-0371

<1:1.27.2-1
  • H
Information Exposure

<1:1.27.1-1
  • L
Improper Input Validation

<1:1.15.5-5
  • M
CVE-2013-4568

<1:1.19.8+dfsg-2.2
  • H
Exposure of Resource to Wrong Sphere

<1:1.27.2-1
  • M
CVE-2004-2152

<1.4.9
  • H
CVE-2004-2186

<1.4.9
  • M
Resource Management Errors

<1:1.19.20+dfsg-2.3
  • M
Information Exposure

<1:1.25.5-1
  • M
Improper Input Validation

<1:1.19.18+dfsg-0.1
  • M
Cross-site Scripting (XSS)

<1:1.19.10+dfsg-1
  • M
CVE-2005-2215

<1.4.9
  • M
Cross-site Scripting (XSS)

<1:1.19.20+dfsg-2.3
  • M
CVE-2013-4567

<1:1.19.8+dfsg-2.2
  • H
Improper Input Validation

<1:1.19.4-1
  • L
Information Exposure

<1:1.19.8+dfsg-1
  • L
Cross-site Scripting (XSS)

<1:1.19.20+dfsg-1
  • M
Cross-site Scripting (XSS)

<1:1.19.5-1
  • L
Cross-site Request Forgery (CSRF)

<1:1.15.3-1
  • L
Cross-site Scripting (XSS)

<1:1.15.5-1
  • M
CVE-2007-1054

<1.7.1-9
  • M
CVE-2005-1245

<1.4.9
  • M
CVE-2005-2396

<1.4.9
  • M
CVE-2004-2187

<1.4.9
  • M
CVE-2004-2185

<1.4.9