[Snyk:High]Wagtail Improper Handling of Insufficient Permissions or Privileges (Due:10/08/2026)

[pkfec]

Overview

wagtail is an open source content management system built on Django.

Affected versions of this package are vulnerable to Improper Handling of Insufficient Permissions or Privileges via the copy for translation endpoint in the Admin API. An attacker can access the contents of pages they do not have edit permissions for by submitting translation requests through this endpoint.

https://app.snyk.io/vuln/SNYK-PYTHON-WAGTAIL-19233398

Introduced through: root@0.0.0 › wagtail@7.0.8

Action items

• Upgrade wagtail to version 7.0.9 or 7.3.4 or 7.4.3 or 8.0rc2

Completion criteria

• Snyk vulnerability is remediated. CMS app works as expected after upgrading wagtail to later versions