piccolo-admin vulnerabilities
CVEs whose affected-version data names the piccolo-admin package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-55485High· 8.8piccolo-admin has a privilege escalation issue - admin to superuser via session-token disclosure in GET /api/tables/sessions/.
piccolo-admin has a privilege escalation issue - admin to superuser via session-token disclosure in GET /api/tables/sessions/.
▾ Twilightpiccolo-admin · piccolo-adminEPSS 0.39%via OSV
CVE-2024-30248High· 7.7Piccolo Admin's raw SVG loading may lead to complete data compromise from admin page
Piccolo Admin's raw SVG loading may lead to complete data compromise from admin page
▾ Twilightpiccolo-admin · piccolo-adminEPSS 0.49%via OSV