anitya (1.8.0), fline (>=0.1.0, <=0.1.3) +1 more potentially affected by CVE-2026-102598 via werkzeug (2.3.0)

werkzeug PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - anitya 1.8.0 - fline =0.1.0, =0.2.0, =0.10.0 Source cves: CVE-2026-102598 Source advisory: OSV:GHSA-G6X2-HCCM-HH4M...

CVE-2026-78360

A missing authorization flaw was found in Anitya. The user deletion endpoint checks that the caller is logged in but does not check that the caller is an administrator. Any authenticated user can delete arbitrary user accounts, including administrator accounts, which can remove administrative...

Missing Authorization

Overview anitya is an A cross-distribution upstream release monitoring project Affected versions of this package are vulnerable to Missing Authorization via the deleteuser process. An attacker can remove arbitrary user accounts, including those with administrative privileges, by sending crafted...

anitya (1.8.0), fline (>=0.1.0, <=0.1.3) +1 more potentially affected by CVE-2026-21860 via werkzeug (2.3.0)

werkzeug PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - anitya 1.8.0 - fline =0.1.0, =0.2.0, =0.10.0 Source cves: CVE-2026-21860 Source advisory: OSV:PYSEC-2026-2044...

anitya (1.8.1), datarobot-drum (>=1.10.0.dev2, <=1.10.11) +5 more potentially affected by CVE-2025-66221 via werkzeug (2.3.4)

werkzeug PYPI version 2.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - anitya 1.8.1 - datarobot-drum =1.10.0.dev2, =0.0.13, =3.2.4, =3.9.0rc4, =4.1.3 Source cves: CVE-2025-66221 Source advisory: OSV:PYSEC-2026-2046...

anitya (1.8.0), fline (>=0.1.0, <=0.1.3) +1 more potentially affected by CVE-2024-49766 via werkzeug (2.3.0)

werkzeug PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - anitya 1.8.0 - fline =0.1.0, =0.2.0, =0.10.0 Source cves: CVE-2024-49766 Source advisory: OSV:PYSEC-2026-2045...

anitya (1.8.1), datarobot-drum (>=1.10.0.dev2, <=1.10.11) +5 more potentially affected by CVE-2024-49766 via werkzeug (2.3.4)

werkzeug PYPI version 2.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - anitya 1.8.1 - datarobot-drum =1.10.0.dev2, =0.0.13, =3.2.4, =3.9.0rc4, =4.1.3 Source cves: CVE-2024-49766 Source advisory: OSV:PYSEC-2026-2045...

anitya (1.8.0), fline (>=0.1.0, <=0.1.3) +1 more potentially affected by CVE-2024-34069 via werkzeug (2.3.0)

werkzeug PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - anitya 1.8.0 - fline =0.1.0, =0.2.0, =0.10.0 Source cves: CVE-2024-34069 Source advisory: OSV:PYSEC-2026-2043...

anitya (1.8.1), datarobot-drum (>=1.10.0.dev2, <=1.10.11) +5 more potentially affected by CVE-2026-27199 via werkzeug (2.3.4)

werkzeug PYPI version 2.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - anitya 1.8.1 - datarobot-drum =1.10.0.dev2, =0.0.13, =3.2.4, =3.9.0rc4, =4.1.3 Source cves: CVE-2026-27199 Source advisory: OSV:PYSEC-2026-2320...

anitya (1.8.0), enosimulator (>=0.1.0, <=0.3.4) +3 more potentially affected by CVE-2026-27205 via flask (2.3.1)

flask PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - anitya 1.8.0 - enosimulator =0.1.0, =0.0.26, =0.0.1, =5.2.0.dev799, =5.2.1 Source cves: CVE-2026-27205 Source advisory: OSV:PYSEC-2026-2151...

anitya (1.8.0), fline (>=0.1.0, <=0.1.3) +1 more potentially affected by CVE-2026-27199 via werkzeug (2.3.0)

werkzeug PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - anitya 1.8.0 - fline =0.1.0, =0.2.0, =0.10.0 Source cves: CVE-2026-27199 Source advisory: OSV:PYSEC-2026-2320...

anitya (1.8.0), enosimulator (>=0.1.0, <=0.3.4) +3 more potentially affected by CVE-2026-27205 via flask (2.3.1)

flask PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - anitya 1.8.0 - enosimulator =0.1.0, =0.0.26, =0.0.1, =5.2.0.dev799, =5.2.1 Source cves: CVE-2026-27205 Source advisory: OSV:GHSA-68RP-WP8R-4726...

anitya (1.8.0), fline (>=0.1.0, <=0.1.3) +1 more potentially affected by CVE-2026-27199 via werkzeug (2.3.0)

werkzeug PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - anitya 1.8.0 - fline =0.1.0, =0.2.0, =0.10.0 Source cves: CVE-2026-27199 Source advisory: OSV:GHSA-29VQ-49WR-VM6X...

anitya (1.8.0), fline (>=0.1.0, <=0.1.3) +1 more potentially affected by CVE-2026-21860 via werkzeug (2.3.0)

werkzeug PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - anitya 1.8.0 - fline =0.1.0, =0.2.0, =0.10.0 Source cves: CVE-2026-21860 Source advisory: OSV:GHSA-87HC-H4R5-73F7...

anitya (1.8.0), fline (>=0.1.0, <=0.1.3) +1 more potentially affected by CVE-2025-66221 via werkzeug (2.3.0)

werkzeug PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - anitya 1.8.0 - fline =0.1.0, =0.2.0, =0.10.0 Source cves: CVE-2025-66221 Source advisory: OSV:GHSA-HGF8-39GV-G3F2...

anitya (1.8.1), datarobot-drum (>=1.10.0.dev2, <=1.10.11) +5 more potentially affected by CVE-2024-49766 via werkzeug (2.3.4)

werkzeug PYPI version 2.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - anitya 1.8.1 - datarobot-drum =1.10.0.dev2, =0.0.13, =3.2.4, =3.9.0rc4, =4.1.3 Source cves: CVE-2024-49766 Source advisory: OSV:GHSA-F9VJ-2WH5-F...

anitya (1.8.0), fline (>=0.1.0, <=0.1.3) +1 more potentially affected by CVE-2024-49766 via werkzeug (2.3.0)

werkzeug PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - anitya 1.8.0 - fline =0.1.0, =0.2.0, =0.10.0 Source cves: CVE-2024-49766 Source advisory: OSV:GHSA-F9VJ-2WH5-FJ8J...

anitya (1.8.0), fline (>=0.1.0, <=0.1.3) +1 more potentially affected by CVE-2024-34069 via werkzeug (2.3.0)

werkzeug PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - anitya 1.8.0 - fline =0.1.0, =0.2.0, =0.10.0 Source cves: CVE-2024-34069 Source advisory: OSV:GHSA-2G68-C3QC-8985...

anitya (1.8.0), enosimulator (>=0.1.0, <=0.3.4) +4 more potentially affected by CVE-2023-30861 via flask (>=2.3.0, <=2.3.1)

flask PYPI version =2.3.0, =0.1.0, =0.2.0, =0.0.26, =0.0.1, =5.2.0.dev799, =5.2.1 Source cves: CVE-2023-30861 Source advisory: MEND:CVE-2023-30861...

anitya (1.8.0), enosimulator (>=0.1.0, <=0.3.4) +4 more potentially affected by CVE-2023-30861 via flask (>=2.3.0, <=2.3.1)

flask PYPI version =2.3.0, =0.1.0, =0.2.0, =0.0.26, =0.0.1, =5.2.0.dev799, =5.2.1 Source cves: CVE-2023-30861 Source advisory: OSV:GHSA-M2QF-HXJV-5GPQ...