Security Bulletin: IBM Edge Data Collector uses django-4.2.25-py3-none-any.whl which is vulnerable to CVE-2025-64458, CVE-2025-64459.

Summary IBM Edge Data Collector uses django-4.2.25-py3-none-any.whl which is vulnerable to CVE-2025-64458, CVE-2025-64459. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2025-64458 DESCRIPTION: An issue was discovered in 5.1 before 5.1.14, 4.2...

Security Bulletin: Denial-of-service attack, SQL injection, and other vulnerabilities might affect IBM Storage Defender - Resiliency Service

Summary IBM Storage Defender - Resiliency Service is vulnerable to denial-of-service attack, SQL injection, and others. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2025-64458 DESCRIPTION: An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before...

OESA-2025-2679 python-django security update

A high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fixes: An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8. NFKC normalization in Python is slow on Windows. As a consequence,...

CVE-2025-64458

An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8. NFKC normalization in Python is slow on Windows. As a consequence, django.http.HttpResponseRedirect, django.http.HttpResponsePermanentRedirect, and the shortcut django.shortcuts.redirect were subject to a...

11x-wagtail-blog (>=0.0.0, <=0.2.0), aldryn-django (>=5.0.2.0, <=5.1.5.0) +291 more potentially affected by CVE-2025-64458 via django (>=5.0.0a1, <=5.1.13)

django PYPI version =5.0.0a1, =0.0.0, =5.0.2.0, =0.0.15, =1.0.0, =1.14.3, =0.0.20, =0.0.13, =0.0.19, =0.0.34, =0.0.50, =0.0.5, =0.0.11, =1.0.3, =1.0.4 and more Source cves: CVE-2025-64458 Source advisory: SNYK:PYTHON-DJANGO-13837025...

aa-charlink (>=0.1.1, <=1.0.0), aa-drifters (0.1.0a0) +540 more potentially affected by CVE-2025-64458 via django (>=4.0.0a1, <=4.2.25)

django PYPI version =4.0.0a1, =0.1.1, =1.0.0b1, =0.1.0a0, =0.11.0a0, =0.1.1, =1.1.0, =0.1.1, =0.1.0, =0.0.3, =4.0.9.0, =4.2.18.0 and more Source cves: CVE-2025-64458 Source advisory: SNYK:PYTHON-DJANGO-13837025...

arthexis (>=0.1.3, <=0.1.30), cdm-ecommerce-backend (0.1.0) +48 more potentially affected by CVE-2025-64458 via django (>=5.2.0a1, <=5.2.7)

django PYPI version =5.2.0a1, =0.1.3, =0.1.0, =0.1.0, =1.3.0, =0.1.0, =2025.7.0, =1.5.7, =1.0.3, =1.2.0 and more Source cves: CVE-2025-64458 Source advisory: OSV:GHSA-QW25-V68C-QJF3...

iepy (0.9.5) potentially affected by CVE-2025-64458 via django (1.7.6)

django PYPI version 1.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - iepy 0.9.5 Source cves: CVE-2025-64458 Source advisory: OSV:GHSA-QW25-V68C-QJF3...

aimmo (>=2.0.0, <=2.0.1), cfl-common (>=6.0.0, <=6.4.1) +12 more potentially affected by CVE-2025-64458 via django (3.2.12)

django PYPI version 3.2.12 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aimmo =2.0.0, =6.0.0, =6.0.0, =1.0.3, =4.0.0, =4.0.6 - testmodule000101 1.1.0 - vmcenter 1.2.0rc3 Source cves: CVE-2025-64458 Source advisory:...

archivebox (>=0.5.0, <=0.5.4), ashley (1.0.0b3) +7 more potentially affected by CVE-2025-64458 via django (3.1.3)

django PYPI version 3.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - archivebox =0.5.0, =1.0.0, =1.0.0, =2.0.0a1, =2.1.1 Source cves: CVE-2025-64458 Source advisory: OSV:GHSA-QW25-V68C-QJF3...

django-database-postgresql-aad-backend (0.0.1), django-ts-bridge (>=0.0.1, <=1.0.2) +9 more potentially affected by CVE-2025-64458 via django (3.1.5)

django PYPI version 3.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-database-postgresql-aad-backend 0.0.1 - django-ts-bridge =0.0.1, =1.0.1, =0.3.0, =0.0.1, =0.9.0, =2.2.0, =0.9.2, =0.10.1 Source cves:...

dj-saml-idp (>=1.1.0, <=1.2.1), django-conn-pool (1.11.1) +7 more potentially affected by CVE-2025-64458 via django (2.0.0rc1)

django PYPI version 2.0.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - dj-saml-idp =1.1.0, =4.3.1, =1.2.7, =0.0.3, =0.0.20, =0.1.0 - test-history-server 0.0.3 Source cves: CVE-2025-64458 Source advisory:...

corgy-erp (>=0.0.1, <=1.0.7), django-account-rcg-chandu (0.1.0) +2 more potentially affected by CVE-2025-64458 via django (3.0.6)

django PYPI version 3.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - corgy-erp =0.0.1, =1.0.1, =1.0.6 Source cves: CVE-2025-64458 Source advisory: OSV:GHSA-QW25-V68C-QJF3...

aimmo (>=0.28.0b5241, <=0.61.8b52), cfl-common (>=3.1.4, <=4.14.2) +2 more potentially affected by CVE-2025-64458 via django (1.11.24)

django PYPI version 1.11.24 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aimmo =0.28.0b5241, =3.1.4, =2.19.0, =2.2.0, =2.4.12 Source cves: CVE-2025-64458 Source advisory: OSV:GHSA-QW25-V68C-QJF3...

directory-api-client (>=9.14.0, <=9.15.0), directory-api-external (>=4.1.1, <=4.2.0) +9 more potentially affected by CVE-2025-64458 via django (1.11.5)

django PYPI version 1.11.5 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - directory-api-client =9.14.0, =4.1.1, =0.0.1, =0.0.1, =1.0.5, =6.4.1, =0.3.0, =2.4.1, =2.0.1, =0.0.6, =0.0.11 Source cves: CVE-2025-64458 Source...

aimmo (0.1.1a0.post0.dev59), seed-control-interface (>=0.9.0, <=0.9.15) potentially affected by CVE-2025-64458 via django (1.9.12)

django PYPI version 1.9.12 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aimmo 0.1.1a0.post0.dev59 - seed-control-interface =0.9.0, =0.9.15 Source cves: CVE-2025-64458 Source advisory: OSV:GHSA-QW25-V68C-QJF3...

django-automated-logging (0.0.1a0) potentially affected by CVE-2025-64458 via django (1.10.0rc1)

django PYPI version 1.10.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-automated-logging 0.0.1a0 Source cves: CVE-2025-64458 Source advisory: OSV:GHSA-QW25-V68C-QJF3...

teamvault (0.6.1) potentially affected by CVE-2025-64458 via django (1.10.2)

django PYPI version 1.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - teamvault 0.6.1 Source cves: CVE-2025-64458 Source advisory: OSV:GHSA-QW25-V68C-QJF3...

django-amazon-price-monitor (>=0.3.0b2, <=0.4.0), django-autoconfig (>=0.3.4, <=0.3.6) potentially affected by CVE-2025-64458 via django (1.9.0rc2)

django PYPI version 1.9.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-amazon-price-monitor =0.3.0b2, =0.3.4, =0.3.6 Source cves: CVE-2025-64458 Source advisory: OSV:GHSA-QW25-V68C-QJF3...

directory-validators (>=4.4.1, <=4.5.0), django-dbfilestorage (>=1.0.0, <=1.0.1) +2 more potentially affected by CVE-2025-64458 via django (1.11.10)

django PYPI version 1.11.10 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - directory-validators =4.4.1, =1.0.0, =0.0.1, =0.1.12, =0.1.17 Source cves: CVE-2025-64458 Source advisory: OSV:GHSA-QW25-V68C-QJF3...