django-rest-authemail (1.6.0) potentially affected by CVE-2026-48588 via django (1.11.17)

django PYPI version 1.11.17 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-rest-authemail 1.6.0 Source cves: CVE-2026-48588 Source advisory: OSV:GHSA-3H9F-R86X-QVJX...

alcali (>=2018.3.3, <=2019.2.3), ambition-edc (0.3.62) +7 more potentially affected by CVE-2026-53878 via django (2.2.8)

django PYPI version 2.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - alcali =2018.3.3, =0.0.2, =7.2.0, =7.2.1 - seed-auth-api 0.9.8 - seed-control-interface 0.9.18 Source cves: CVE-2026-53878 Source advisory:...

alcali (>=2018.3.3, <=2019.2.3), ambition-edc (0.3.62) +7 more potentially affected by CVE-2026-53877 via django (2.2.8)

django PYPI version 2.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - alcali =2018.3.3, =0.0.2, =7.2.0, =7.2.1 - seed-auth-api 0.9.8 - seed-control-interface 0.9.18 Source cves: CVE-2026-53877 Source advisory:...

autoreduce-db (22.0.0.dev37), autoreduce-frontend (22.0.0.dev24) +6 more potentially affected by CVE-2026-53878 via django (4.0.6)

django PYPI version 4.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - autoreduce-db 22.0.0.dev37 - autoreduce-frontend 22.0.0.dev24 - autoreduce-qp 22.0.0.dev38 - autoreduce-rest-api 22.0.0.dev23 - autoreduce-scripts...

autoreduce-db (22.0.0.dev37), autoreduce-frontend (22.0.0.dev24) +6 more potentially affected by CVE-2026-53877 via django (4.0.6)

django PYPI version 4.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - autoreduce-db 22.0.0.dev37 - autoreduce-frontend 22.0.0.dev24 - autoreduce-qp 22.0.0.dev38 - autoreduce-rest-api 22.0.0.dev23 - autoreduce-scripts...

django-rest-authemail (>=1.7.9, <=2.0.0), umap-project (>=1.0.0rc2, <=1.0.0rc6) +1 more potentially affected by CVE-2026-48588 via django (2.1.1)

django PYPI version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-rest-authemail =1.7.9, =1.0.0rc2, =0.1.0, =0.2.0.dev2 Source cves: CVE-2026-48588 Source advisory: OSV:GHSA-3H9F-R86X-QVJX...

django-rest-authemail (>=1.7.9, <=2.0.0), umap-project (>=1.0.0rc2, <=1.0.0rc6) +1 more potentially affected by CVE-2026-53877 via django (2.1.1)

django PYPI version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-rest-authemail =1.7.9, =1.0.0rc2, =0.1.0, =0.2.0.dev2 Source cves: CVE-2026-53877 Source advisory: OSV:GHSA-CRHF-3PFG-W68W...

autoreduce-db (22.0.0.dev21), autoreduce-qp (>=22.0.0.dev21, <=22.0.0.dev23) +5 more potentially affected by CVE-2026-53878 via django (3.2.10)

django PYPI version 3.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - autoreduce-db 22.0.0.dev21 - autoreduce-qp =22.0.0.dev21, =22.0.0.dev13, =22.0.0.dev29, =0.2.0, =1.0.1, =0.0.0.dev8, =0.0.0.dev13 Source cves:...

django-rest-authemail (1.6.0) potentially affected by CVE-2026-53877 via django (1.11.17)

django PYPI version 1.11.17 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-rest-authemail 1.6.0 Source cves: CVE-2026-53877 Source advisory: OSV:GHSA-CRHF-3PFG-W68W...

directory-constants (>=21.0.1, <=21.0.2), djongo (1.3.7) +2 more potentially affected by CVE-2026-53878 via django (3.1.12)

django PYPI version 3.1.12 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - directory-constants =21.0.1, =1.1.0rc0, =1.2.0 - rest-framework-djongo 0.1.7 Source cves: CVE-2026-53878 Source advisory: OSV:GHSA-8QCX-XF44-272X...

autoreduce-db (22.0.0.dev21), autoreduce-qp (>=22.0.0.dev21, <=22.0.0.dev23) +5 more potentially affected by CVE-2026-53877 via django (3.2.10)

django PYPI version 3.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - autoreduce-db 22.0.0.dev21 - autoreduce-qp =22.0.0.dev21, =22.0.0.dev13, =22.0.0.dev29, =0.2.0, =1.0.1, =0.0.0.dev8, =0.0.0.dev13 Source cves:...

autoreduce-db (22.0.0.dev21), autoreduce-qp (>=22.0.0.dev21, <=22.0.0.dev23) +5 more potentially affected by CVE-2024-45231 via django (3.2.10)

django PYPI version 3.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - autoreduce-db 22.0.0.dev21 - autoreduce-qp =22.0.0.dev21, =22.0.0.dev13, =22.0.0.dev29, =0.2.0, =1.0.1, =0.0.0.dev8, =0.0.0.dev13 Source cves:...

django-rest-authemail (1.6.0) potentially affected by CVE-2024-45231 via django (1.11.17)

django PYPI version 1.11.17 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-rest-authemail 1.6.0 Source cves: CVE-2024-45231 Source advisory: OSV:PYSEC-2026-1297...

harbor-api-client (>=2.7.0, <=2.7.4), ikewaipy (>=0.1.0, <=0.1.2) +2 more potentially affected by CVE-2024-6345 via setuptools (21.2.2)

setuptools PYPI version 21.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - harbor-api-client =2.7.0, =0.1.0, =0.2.0, =1.2.0 - tb-rest-client-fork 3.9.1 Source cves: CVE-2024-6345 Source advisory: OSV:PYSEC-2026-191...

wger (1.5.0) potentially affected by CVE-2024-21520 via djangorestframework (2.3.13)

djangorestframework PYPI version 2.3.13 is affected by a known vulnerability. The following packages have a transitive dependency on djangorestframework and may be impacted: - wger 1.5.0 Source cves: CVE-2024-21520 Source advisory: OSV:PYSEC-2026-1304...

Improper Removal of Sensitive Information Before Storage or Transfer

Overview Affected versions of this package are vulnerable to Improper Removal of Sensitive Information Before Storage or Transfer in the REST API task-instance detail and list endpoints, which returned deferred task trigger keyword arguments without masking sensitive data. An attacker can access...

GHSA-22HF-VX2V-GJFF Apache Airflow exposes deferred trigger kwargs in task-instance API responses

In Apache Airflow before 3.3.0, the REST API task-instance detail and list endpoints returned a deferred task's trigger kwargs without masking. When a deferred operator passed a secret for example a provider API key into its trigger, any authenticated user with DAG-scoped task-instance read acces...

rest-social-auth (>=1.3.0, <=1.4.0), saltdash (>=0.9.1, <=0.9.5) +1 more potentially affected by CVE-2024-32879 via social-auth-app-django (2.1.0)

social-auth-app-django PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-app-django and may be impacted: - rest-social-auth =1.3.0, =0.9.1, =1.0.0rc1, =1.0.0rc8 Source cves: CVE-2024-32879 Source advisory: OSV:PYSEC-2026-19...

pixelcms-server (>=0.4.1, <=0.4.2), pixelcms-shop-server (0.0.1) +1 more potentially affected by CVE-2024-32879 via social-auth-app-django (0.1.0)

social-auth-app-django PYPI version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-app-django and may be impacted: - pixelcms-server =0.4.1, =1.0.0, =1.1.0 Source cves: CVE-2024-32879 Source advisory: OSV:PYSEC-2026-1931...

edx-auth-backends (>=1.0.1, <=2.0.2), rest-social-auth (1.2.0) potentially affected by CVE-2024-32879 via social-auth-app-django (1.2.0)

social-auth-app-django PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-app-django and may be impacted: - edx-auth-backends =1.0.1, =2.0.2 - rest-social-auth 1.2.0 Source cves: CVE-2024-32879 Source advisory:...