Lektor vulnerabilities

Products

• Lektor 3

Newest

• lektor Lektor through 3.3.14 and 3.4.0b15 Path Traversal via Admin API Drive-Letter Paths CVE-2026-123619 5.9 MediumNovember 6, 2026
• lektor Lektor 3.3.14 CSRF via Admin API Endpoints CVE-2026-104059 7.0 HighOctober 1, 2026
• lektor Lektor does not sanitize database path traversal CVE-2024-28335 Fix available 9.1 CriticalMarch 27, 2024