Detections
Analytics
SCA: security update for wagtail (GHSA-f2p5-j6fg-5cxf)
low Tenable Self-Hosted Container Security Plugin ID 446146
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- Wagtail is an open source content management system built on Django. In versions prior to 7.0.8, 7.3.3 and
7.4.2, an authenticated admin user can trigger expensive rendition processing with purposefully crafted
filter specs resulting in potentially service degradation. The vulnerability is not exploitable by an
ordinary site visitor without access to the Wagtail admin. This issue has been fixed in versions 7.0.8,
7.3.3, and 7.4.2. (CVE-2026-54260)
Solution
Update the wagtail library and its related packages to version 7.0.8 or later.See Also
Plugin Details
Severity: Low
ID: 446146
Version: Revision 1.1
Type: Local
Family: SCA Checks
Published: 8/20/2026
Updated: 8/20/2026
Risk Information
VPR
Risk Factor: Low
Score: 1.2
Percentile: 0.01
Vendor
Vendor Severity: Medium
CVSS v2
Risk Factor: Low
Base Score: 3.3
Temporal Score: 2.4
Vector: CVSS2#AV:N/AC:L/Au:M/C:N/I:N/A:P
CVSS Score Source: CVE-2026-54260
CVSS v3
Risk Factor: Low
Base Score: 2.7
Temporal Score: 2.4
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 8/20/2026
Vulnerability Publication Date: 7/1/2026
Reference Information
CVE: CVE-2026-54260
cwe: CWE-400