CVE-2023-48171

CVE-2023-48171 affects OWASP DefectDojo before v1.5.3.1. The issue, described consistently across NVD/OSV/CVE feeds, is a privilege-escalation in the user permissions component that could allow a remote attacker to gain HIGH impact. The only remediation documented is to upgrade to DefectDojo v1.5...

CVE-2026-3816

The CVE-2026-3816 affects OWASP DefectDojo