Qgis vulnerabilities

Products

• Qgis 2

Newest

• qgis QGIS: Stored XSS in WFS3 getFeatures HTML page via unescaped feature attribute values CVE-2026-104140 Fix available 6.1 MediumOctober 12, 2026
• qgis QGIS had validated RCE and Repository Takeover via GitHub Actions CVE-2026-24480 Public exploit 8.7 HighJanuary 27, 2026
• qgis qwc2 Cross-Site Scripting Vulnerability in QWC2 CVE-2025-11183 Fix available 6.9 MediumOctober 13, 2025