Fedora 43 : python-django5 (2026-fbb9501b22)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-fbb9501b22 advisory. Update python-django5 to version 5.2.16 Fixes three low-severity CVEs - CVE-2026-48588: Potential exposure of private data via cached Set-Cookie...

OESA-2026-3078 python-django security update

A high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fixes: An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16. UpdateCacheMiddleware and the cachepage decorator cache responses that vary on cookies when the incoming reque...

OESA-2026-3077 python-django security update

A high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fixes: An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16. UpdateCacheMiddleware and the cachepage decorator cache responses that vary on cookies when the incoming reque...

arches (8.0.0a1), avaintegration-metapackage (>=6.0.4.3, <=6.0.5.36) +50 more potentially affected by CVE-2026-48588 via django (>=6.0.0a1, <=6.0.6)

django PYPI version =6.0.0a1, =6.0.4.3, =2.0.0, =1.1.0, =1.2.1 and more Source cves: CVE-2026-48588 Source advisory: SNYK:PYTHON-DJANGO-17881428...

djangodjangodjango (4.1.11) potentially affected by CVE-2026-48588 via django (4.1.11)

django PYPI version 4.1.11 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - djangodjangodjango 4.1.11 Source cves: CVE-2026-48588 Source advisory: OSV:GHSA-3H9F-R86X-QVJX...

alertwise (1.0.0), allauth-fork-zango (>=65.10.0, <=65.10.3) +14 more potentially affected by CVE-2026-48588 via django (4.2.16)

django PYPI version 4.2.16 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - alertwise 1.0.0 - allauth-fork-zango =65.10.0, =8.0.0, =0.1.3, =0.1.1, =0.1.76, =0.1.0b0, =1.6.0rc1, =0.0.4, =6.0.21, =1.0.1, =1.2.0b9 and more...

django-rest-authemail (>=1.7.9, <=2.0.0), umap-project (>=1.0.0rc2, <=1.0.0rc6) +1 more potentially affected by CVE-2026-48588 via django (2.1.1)

django PYPI version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-rest-authemail =1.7.9, =1.0.0rc2, =0.1.0, =0.2.0.dev2 Source cves: CVE-2026-48588 Source advisory: OSV:GHSA-3H9F-R86X-QVJX...

bgs-chat-app (>=0.0.1, <=0.0.3), djangodjangodjango (4.2.19) +5 more potentially affected by CVE-2026-48588 via django (4.2.19)

django PYPI version 4.2.19 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - bgs-chat-app =0.0.1, =0.4.1, =0.1.0, =7.0.0, =7.0.0, =7.0.3 - pheme 21.10.4 Source cves: CVE-2026-48588 Source advisory: OSV:GHSA-3H9F-R86X-QVJX...

autoreduce-frontend (>=22.0.0.dev22, <=22.0.0.dev23), django-rq-scheduler (2022.5.1) +4 more potentially affected by CVE-2026-48588 via django (4.0.4)

django PYPI version 4.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - autoreduce-frontend =22.0.0.dev22, =0.0.17, =0.7.15, =0.7.23 Source cves: CVE-2026-48588 Source advisory: OSV:GHSA-3H9F-R86X-QVJX...

afex-devtools (>=0.1.0, <=0.32.0), aldryn-django (4.1.6.0) +3 more potentially affected by CVE-2026-48588 via django (4.1.6)

django PYPI version 4.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - afex-devtools =0.1.0, =0.1.0, =0.0.3, =0.0.17 Source cves: CVE-2026-48588 Source advisory: OSV:GHSA-3H9F-R86X-QVJX...

django-basic-auth-ip-whitelist (>=0.2.1, <=0.3.1), django-chats (0.2.2) +14 more potentially affected by CVE-2026-48588 via django (3.0.0)

django PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-basic-auth-ip-whitelist =0.2.1, =0.8.0, =0.7.0, =0.10.0, =0.5.0, =0.6.1, =0.7.0, =0.4.1, =1.0.1, =1.0.2 and more Source cves: CVE-2026-48588...

crudxworkertejas1899 (0.4.0), djangodjangodjango (4.1.4) +1 more potentially affected by CVE-2026-48588 via django (4.1.4)

django PYPI version 4.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - crudxworkertejas1899 0.4.0 - djangodjangodjango 4.1.4 - railguns 0.64.0 Source cves: CVE-2026-48588 Source advisory: OSV:GHSA-3H9F-R86X-QVJX...

directory-healthcheck (>=3.1.0, <=3.1.1), djangodjangodjango (4.1.9) potentially affected by CVE-2026-48588 via django (4.1.9)

django PYPI version 4.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - directory-healthcheck =3.1.0, =3.1.1 - djangodjangodjango 4.1.9 Source cves: CVE-2026-48588 Source advisory: OSV:GHSA-3H9F-R86X-QVJX...

djangodjangodjango (4.2.27), mayan-edms (>=4.6.12, <=4.10.3) +4 more potentially affected by CVE-2026-48588 via django (4.2.27)

django PYPI version 4.2.27 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - djangodjangodjango 4.2.27 - mayan-edms =4.6.12, =7.3.0, =7.2.34, =4.0.0, =4.0.5 - pheme 21.11.2 Source cves: CVE-2026-48588 Source advisory:...

djangodjangodjango (4.2.26), mayan-edms (>=4.7.7, <=4.8.9) +3 more potentially affected by CVE-2026-48588 via django (4.2.26)

django PYPI version 4.2.26 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - djangodjangodjango 4.2.26 - mayan-edms =4.7.7, =7.2.29, =7.2.33 - pheme 21.11.1 Source cves: CVE-2026-48588 Source advisory: OSV:GHSA-3H9F-R86X-QVJ...

admin-auth0 (>=0.1.1, <=0.1.5), directory-api-client (>=26.4.0, <=26.4.2) +15 more potentially affected by CVE-2026-48588 via django (4.2.3)

django PYPI version 4.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - admin-auth0 =0.1.1, =26.4.0, =7.2.5, =0.2.0, =0.0.1, =0.0.5, =0.6.0, =2.0.0rc27, =1.7.2, =0.1.4, =0.69.0, =0.70.0 and more Source cves: CVE-2026-485...

autoreduce-db (22.0.0.dev37), autoreduce-frontend (22.0.0.dev24) +6 more potentially affected by CVE-2026-48588 via django (4.0.6)

django PYPI version 4.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - autoreduce-db 22.0.0.dev37 - autoreduce-frontend 22.0.0.dev24 - autoreduce-qp 22.0.0.dev38 - autoreduce-rest-api 22.0.0.dev23 - autoreduce-scripts...

djangodjangodjango (4.2.23), grimoirelab (>=1.14.0rc1, <=1.16.0rc1) +5 more potentially affected by CVE-2026-48588 via django (4.2.23)

django PYPI version 4.2.23 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - djangodjangodjango 4.2.23 - grimoirelab =1.14.0rc1, =1.0.0, =4.6.6, =7.2.0, =7.2.0, =21.10.5, =21.10.6 Source cves: CVE-2026-48588 Source advisory:...

djangodjangodjango (4.2.24), geonode (4.4.4) +1 more potentially affected by CVE-2026-48588 via django (4.2.24)

django PYPI version 4.2.24 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - djangodjangodjango 4.2.24 - geonode 4.4.4 - mayan-edms =4.6.10, =4.10.0 Source cves: CVE-2026-48588 Source advisory: OSV:GHSA-3H9F-R86X-QVJX...

aldryn-django (4.2.10.0), arches (7.5.1) +17 more potentially affected by CVE-2026-48588 via django (4.2.10)

django PYPI version 4.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aldryn-django 4.2.10.0 - arches 7.5.1 - cpu-utilization-monitoring 0.1.3 - deepdataspace =0.12.2, =0.5.65, =0.1.43, =0.2.4, =1.5.2.dev14, =0.3.2,...