CVE-2026-6873 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, openstack-horizon-2026.1...

Security update for python-Django (important)

openSUSE security update: security update for python-django ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20937-1 Rating: important References: bsc1267576 bsc1267577 bsc1267578 bsc1267579 bsc1267580 Cross-References: CVE-2026-35193 CVE-2026-48587...

arches (8.0.0a1), avaintegration-metapackage (>=6.0.4.3, <=6.0.5.36) +45 more potentially affected by CVE-2026-6873 via django (>=6.0.0a1, <=6.0.5)

django PYPI version =6.0.0a1, =6.0.4.3, =2.0.0, =1.1.0, =0.1.0, =0.4.5 and more Source cves: CVE-2026-6873 Source advisory: SNYK:PYTHON-DJANGO-17151728...

11x-wagtail-blog (>=0.0.0, <=0.2.0), aldryn-django (>=5.0.2.0, <=5.1.5.0) +445 more potentially affected by CVE-2026-6873 via django (>=5.0.0a1, <=5.2.14)

django PYPI version =5.0.0a1, =0.0.0, =5.0.2.0, =0.0.15, =0.42.1, =1.0.0, =1.14.3, =0.0.20, =0.0.13, =0.0.19, =0.0.34, =0.0.50, =0.0.51 and more Source cves: CVE-2026-6873 Source advisory: SNYK:PYTHON-DJANGO-17151728...

ae-django-utils (0.3.1), django-admin-toolkit (>=0.1.5, <=0.1.6) +12 more potentially affected by CVE-2026-6873 via django (4.0.0rc1)

django PYPI version 4.0.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - ae-django-utils 0.3.1 - django-admin-toolkit =0.1.5, =0.4.0a2, =0.1.0, =0.3.1, =0.1.0, =1.1.0, =1.0.0, =1.9.0 Source cves: CVE-2026-6873 Source...

djangodjangodjango (4.1.10) potentially affected by CVE-2026-6873 via django (4.1.10)

django PYPI version 4.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - djangodjangodjango 4.1.10 Source cves: CVE-2026-6873 Source advisory: OSV:GHSA-H7PC-VWP9-298G...

djangodjangodjango (4.2.25), pheme (21.11.0) potentially affected by CVE-2026-6873 via django (4.2.25)

django PYPI version 4.2.25 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - djangodjangodjango 4.2.25 - pheme 21.11.0 Source cves: CVE-2026-6873 Source advisory: OSV:GHSA-H7PC-VWP9-298G...

fusionflow-upload (>=0.0.6, <=0.1.5) potentially affected by CVE-2026-6873 via django (2.2.7)

django PYPI version 2.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - fusionflow-upload =0.0.6, =0.1.5 Source cves: CVE-2026-6873 Source advisory: OSV:GHSA-H7PC-VWP9-298G...

auth-token-django (>=0.0.1, <=0.0.5), directory-constants (23.1.0) +7 more potentially affected by CVE-2026-6873 via django (4.2.1)

django PYPI version 4.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - auth-token-django =0.0.1, =2.0.0rc15, =0.0.18, =0.2.1, =1.2.8 Source cves: CVE-2026-6873 Source advisory: OSV:GHSA-H7PC-VWP9-298G...

django-autoconfig (0.8.0) potentially affected by CVE-2026-6873 via django (2.1.0rc1)

django PYPI version 2.1.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-autoconfig 0.8.0 Source cves: CVE-2026-6873 Source advisory: OSV:GHSA-H7PC-VWP9-298G...

afex-devtools (>=0.1.0, <=0.32.0), aldryn-django (4.1.6.0) +3 more potentially affected by CVE-2026-6873 via django (4.1.6)

django PYPI version 4.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - afex-devtools =0.1.0, =0.1.0, =0.0.3, =0.0.17 Source cves: CVE-2026-6873 Source advisory: OSV:GHSA-H7PC-VWP9-298G...

gerapy (>=0.8.7, <=0.9.3a2), ora2 (2.4.4) potentially affected by CVE-2026-6873 via django (1.11.26)

django PYPI version 1.11.26 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - gerapy =0.8.7, =0.9.3a2 - ora2 2.4.4 Source cves: CVE-2026-6873 Source advisory: OSV:GHSA-H7PC-VWP9-298G...

cfl-common (>=8.4.4, <=8.5.1), codeforlife (>=0.25.17, <=0.25.22) +7 more potentially affected by CVE-2026-6873 via django (4.2.20)

django PYPI version 4.2.20 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - cfl-common =8.4.4, =0.25.17, =8.4.5, =1.10.0rc3, =7.1.0, =7.1.0, =7.4.0, =7.4.7 Source cves: CVE-2026-6873 Source advisory: OSV:GHSA-H7PC-VWP9-298G...

crudxworkertejas1899 (0.4.0), djangodjangodjango (4.1.4) +1 more potentially affected by CVE-2026-6873 via django (4.1.4)

django PYPI version 4.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - crudxworkertejas1899 0.4.0 - djangodjangodjango 4.1.4 - railguns 0.64.0 Source cves: CVE-2026-6873 Source advisory: OSV:GHSA-H7PC-VWP9-298G...

djangodjangodjango (4.2.24), geonode (4.4.4) +1 more potentially affected by CVE-2026-6873 via django (4.2.24)

django PYPI version 4.2.24 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - djangodjangodjango 4.2.24 - geonode 4.4.4 - mayan-edms =4.6.10, =4.10.0 Source cves: CVE-2026-6873 Source advisory: OSV:GHSA-H7PC-VWP9-298G...

alcali (>=2018.3.1, <=2019.2.1.post0), kiwitcms (7.0.0) +10 more potentially affected by CVE-2026-6873 via django (2.2.5)

django PYPI version 2.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - alcali =2018.3.1, =0.31.14, =0.8.0, =0.3.1, =0.0.1, =0.0.1, =0.0.1, =0.0.5 Source cves: CVE-2026-6873 Source advisory: OSV:GHSA-H7PC-VWP9-298G...

alastria-auth (>=0.0.3, <=0.0.17), credential (>=0.0.1, <=0.0.2) +11 more potentially affected by CVE-2026-6873 via django (4.1.3)

django PYPI version 4.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - alastria-auth =0.0.3, =0.0.1, =0.5.2.4, =0.0.1, =1.0.0rc0, =0.0.1, =0.1.4 - railguns 0.63.0 Source cves: CVE-2026-6873 Source advisory:...

blendedux (>=0.1.0, <=0.1.4), blendedux-lang (>=1.1.0, <=1.1.2) +15 more potentially affected by CVE-2026-6873 via django (4.1.7)

django PYPI version 4.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - blendedux =0.1.0, =1.1.0, =0.1.0, =0.5.0, =3.11.10, =1.0.0, =12.0.0, =1.3.2, =1.0.4, =32.0.1, =32.1.0 and more Source cves: CVE-2026-6873 Source...

django-aesfield (3.0.0), django-basic-auth-ip-whitelist (>=0.1.0a3, <=0.1.0.post3) +8 more potentially affected by CVE-2026-6873 via django (2.1.0)

django PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-aesfield 3.0.0 - django-basic-auth-ip-whitelist =0.1.0a3, =0.1.0, =0.3.0, =1.7.3, =0.0.3, =1.1.0, =0.1.2, =0.1.3 Source cves: CVE-2026-6873...

archivebox (>=0.4.6, <=0.4.21), autoneuro-pypi (1.0.0) +9 more potentially affected by CVE-2026-6873 via django (3.0.8)

django PYPI version 3.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - archivebox =0.4.6, =0.1.3, =1.2.0, =0.3.1, =1.0.1, =0.6.11, =0.9.1 Source cves: CVE-2026-6873 Source advisory: OSV:GHSA-H7PC-VWP9-298G...