CVE-2026-110889

Generation of Error Message Containing Sensitive Information vulnerability in Gantry Gantry 5 Framework gantry5 allows Retrieve Embedded Sensitive Data.This issue affects Gantry 5 Framework: from n/a through 5.6.4...

CVE-2026-110889 WordPress Gantry 5 Framework plugin <= 5.6.4 - Sensitive Data Exposure vulnerability

Generation of Error Message Containing Sensitive Information vulnerability in Gantry Gantry 5 Framework gantry5 allows Retrieve Embedded Sensitive Data.This issue affects Gantry 5 Framework: from n/a through 5.6.4...

CVE-2026-110889

The Gantry 5 Framework WordPress plugin (versions

EUVD-2026-103283

Generation of Error Message Containing Sensitive Information vulnerability in Gantry Gantry 5 Framework gantry5 allows Retrieve Embedded Sensitive Data.This issue affects Gantry 5 Framework: from n/a through 5.6.4...

CVE-2026-110889 WordPress Gantry 5 Framework plugin <= 5.6.4 - Sensitive Data Exposure vulnerability

Generation of Error Message Containing Sensitive Information vulnerability in Gantry Gantry 5 Framework gantry5 allows Retrieve Embedded Sensitive Data.This issue affects Gantry 5 Framework: from n/a through 5.6.4...

PT-2026-116394

Name of the Vulnerable Software and Affected Versions Gantry 5 Framework versions prior to 5.6.4 Description The Gantry 5 Framework allows the retrieval of embedded sensitive data through the generation of error messages that contain sensitive information. Recommendations Update Gantry 5 Framewor...

CVE-2026-110889: Generation of Error Message Containing Sensitive Information

Generation of Error Message Containing Sensitive Information vulnerability in Gantry Gantry 5 Framework gantry5 allows Retrieve Embedded Sensitive Data.This issue affects Gantry 5 Framework: from n/a through 5.6.4...

WordPress Gantry 5 Framework information leakage vulnerability

The WordPress Gantry 5 Framework versions 5.6.4 and earlier have a vulnerability related to information leakage. This vulnerability arises from error messages containing sensitive information, which may lead to the retrieval of embedded sensitive data...

WordPress Gantry 5 Framework plugin <= 5.6.4 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by neurotx in WordPress Plugin Gantry 5 Framework versions = 5.6.4...

gantry (>=0.5.1, <=0.6.14), openicl (>=0.1.1, <=0.1.6) +2 more potentially affected by CVE-2026-66007 via datasets (2.7.1)

datasets PYPI version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - gantry =0.5.1, =0.1.1, =0.0.2, =0.0.4 Source cves: CVE-2026-66007 Source advisory: OSV:GHSA-379C-QX7V-6H59...

gantry (>=0.5.1, <=0.6.14), openicl (>=0.1.1, <=0.1.6) +2 more potentially affected by CVE-2026-66007 via datasets (2.7.1)

datasets PYPI version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - gantry =0.5.1, =0.1.1, =0.0.2, =0.0.4 Source cves: CVE-2026-66007 Source advisory: OSV:PYSEC-2026-3716...

gantry (>=0.5.11, <=0.6.13) potentially affected by CVE-2025-25295 via label-studio-sdk (0.0.21)

label-studio-sdk PYPI version 0.0.21 is affected by a known vulnerability. The following packages have a transitive dependency on label-studio-sdk and may be impacted: - gantry =0.5.11, =0.6.13 Source cves: CVE-2025-25295 Source advisory: OSV:PYSEC-2026-1506...

EUVD-2010-4862

Malware in sbrugna...

CVE-2024-9382

The Gantry 4 Framework plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'overrideid' parameter in all versions up to, and including, 4.1.21 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2010-4898

SQL injection vulnerability in the Gantry comgantry component 3.0.10 for Joomla! allows remote attackers to execute arbitrary SQL commands via the moduleid parameter to index.php...

berrydb (>=1.0.9, <=1.5.1), datapipe-label-studio-lite (>=0.2.0, <=0.3.3) +3 more potentially affected by CVE-2025-25295 via label-studio-sdk (>=0.0.1, <=1.0.8)

label-studio-sdk PYPI version =0.0.1, =1.0.9, =0.2.0, =0.5.11, =1.13.0, =0.0.15, =1.0.0 Source cves: CVE-2025-25295 Source advisory: MEND:CVE-2025-25295...

gantry (>=0.5.11, <=0.6.13) potentially affected by CVE-2025-25295 via label-studio-sdk (0.0.21)

label-studio-sdk PYPI version 0.0.21 is affected by a known vulnerability. The following packages have a transitive dependency on label-studio-sdk and may be impacted: - gantry =0.5.11, =0.6.13 Source cves: CVE-2025-25295 Source advisory: OSV:GHSA-RGV9-W7JP-M23G...

CVE-2024-9382

The Gantry 4 Framework plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'overrideid' parameter in all versions up to, and including, 4.1.21 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2024-9382

The Gantry 4 Framework plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'overrideid' parameter in all versions up to, and including, 4.1.21 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2024-9382

CVE-2024-9382 describes a Reflected Cross-Site Scripting (XSS) in the Gantry 4 Framework plugin for WordPress. The vulnerability arises from insufficient input sanitization and output escaping in the override_id parameter, affecting all versions up to and including 4.1.21. It allows unauthenticat...