ROOT-APP-PYPI-CVE-2026-15307 CVE-2026-15307 in django - Patched by Root

Root has patched CVE-2026-15307 in the django package for Root:PyPI. Multiple fixed versions available...

django-pesapal (>=0.3.0, <=0.3.4) potentially affected by CVE-2026-15307 via django (1.7.8)

django PYPI version 1.7.8 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-pesapal =0.3.0, =0.3.4 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

ambition-edc (>=0.3.63, <=0.3.66), capreolus (0.1.3) +7 more potentially affected by CVE-2026-15307 via django (2.2.9)

django PYPI version 2.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - ambition-edc =0.3.63, =1.1.35, =1.13.0.dev5, =0.1.0, =2.1.0, =2.2.1 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

aolab-aopy (>=0.6.3, <=0.9.3), aolab-bmi3d (>=1.0.0, <=1.2.4) +15 more potentially affected by CVE-2026-15307 via django (4.1.0)

django PYPI version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aolab-aopy =0.6.3, =1.0.0, =0.0.3, =0.1.0, =0.2.6, =2022.6.1, =1.0.0, =0.1.0, =1.0.0, =1.0.2 - sicksid-drf-tus 1.22.0 and more Source cves:...

aimmo (>=0.69.11b455, <=1.3.1), cfl-common (>=4.30.11, <=5.26.4) +6 more potentially affected by CVE-2026-15307 via django (2.2.24)

django PYPI version 2.2.24 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aimmo =0.69.11b455, =4.30.11, =4.30.11, =0.1.1, =0.9.7, =3.11.0, =2.0.0, =2.7.7, =3.4.4 Source cves: CVE-2026-15307 Source advisory:...

nemo (>=1.22.0, <=1.22.1), patchman (>=1.2.3, <=1.2.4) potentially affected by CVE-2026-15307 via django (1.11.27)

django PYPI version 1.11.27 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - nemo =1.22.0, =1.2.3, =1.2.4 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

ariadne-jwt (>=0.1.0, <=0.1.3), balder (0.1.24) +28 more potentially affected by CVE-2026-15307 via django (3.1.0)

django PYPI version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - ariadne-jwt =0.1.0, =20.13.1, =0.1.0, =0.10.0, =0.9.0, =0.4.0, =0.12.0, =0.5.0, =0.7.0, =0.8.0, =2.0.4, =2.0.6 and more Source cves: CVE-2026-15307...

django-bloggy (1.0.0), kiwitcms (10.5.0) +2 more potentially affected by CVE-2026-15307 via django (3.2.9)

django PYPI version 3.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-bloggy 1.0.0 - kiwitcms 10.5.0 - mercarigetter =1.0.14, =1.0.0, =1.1.0 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

alcali (>=2018.3.2, <=2019.2.2), botbuilder-applicationinsights (>=4.7.0, <=4.14.2) +4 more potentially affected by CVE-2026-15307 via django (2.2.6)

django PYPI version 2.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - alcali =2018.3.2, =4.7.0, =4.10.0, =4.14.2 - kiwitcms 7.1.0 - ls-orb 0.1.0 - wazimap 2.1.0 Source cves: CVE-2026-15307 Source advisory:...

arches (7.5.0), arches-for-science (>=1.1.0a0, <=1.1.0a1) +9 more potentially affected by CVE-2026-15307 via django (4.2.8)

django PYPI version 4.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - arches 7.5.0 - arches-for-science =1.1.0a0, =26.4.4, =40.0.0, =24.0.0, =3.2.0, =0.49.0, =0.39.0, =0.39.6 Source cves: CVE-2026-15307 Source advisory...

kodland-sso-server (>=0.1.1, <=0.3.0) potentially affected by CVE-2026-15307 via django (2.0.1)

django PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - kodland-sso-server =0.1.1, =0.3.0 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

blendedux (>=0.1.0, <=0.1.4), blendedux-lang (>=1.1.0, <=1.1.2) +15 more potentially affected by CVE-2026-15307 via django (4.1.7)

django PYPI version 4.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - blendedux =0.1.0, =1.1.0, =0.1.0, =0.5.0, =3.11.10, =1.0.0, =12.0.0, =1.3.2, =1.0.4, =32.0.1, =32.1.0 and more Source cves: CVE-2026-15307 Source...

aldryn-django (4.2.7.0), cypartagraphqlsubscriptionstools (>=2.0.0, <=4.1.7) +14 more potentially affected by CVE-2026-15307 via django (4.2.7)

django PYPI version 4.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aldryn-django 4.2.7.0 - cypartagraphqlsubscriptionstools =2.0.0, =7.2.8, =0.22.1, =1.0.0, =2.5.3, =0.39.0, =2.0.1rc1, =0.38.0rc1, =21.8.0, =21.9.0 -...

arches (8.0.0a1), avaintegration-metapackage (>=6.0.4.3, <=6.0.5.36) +51 more potentially affected by CVE-2026-15307 via django (>=6.0.0a1, <=6.0.7)

django PYPI version =6.0.0a1, =6.0.4.3, =3.1.0, =2.0.0, =1.1.0, =1.2.1 and more Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

cosmicdbsemantic (>=0.0.30, <=0.0.37), fiduswriter (>=3.7.0a4, <=3.7.0a5) +3 more potentially affected by CVE-2026-15307 via django (2.2.3)

django PYPI version 2.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - cosmicdbsemantic =0.0.30, =3.7.0a4, =0.1.1, =1.1.2, =1.1.6 - rdmo 0.14.5 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

aimmo (>=0.61.9b59, <=0.67.1b256), caluma (6.7.0) +8 more potentially affected by CVE-2026-15307 via django (2.2.17)

django PYPI version 2.2.17 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aimmo =0.61.9b59, =4.15.0, =4.15.0, =0.0.8, =2.5.1, =1.24.11, =1.24.13 - umap-project 1.2.3 Source cves: CVE-2026-15307 Source advisory:...

drf-tus (1.21.1), richie (0.1.0) potentially affected by CVE-2026-15307 via django (1.11.14)

django PYPI version 1.11.14 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - drf-tus 1.21.1 - richie 0.1.0 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

django-admin-caching (0.1.3), django-budget (0.7.2) +19 more potentially affected by CVE-2026-15307 via django (1.11.0)

django PYPI version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-admin-caching 0.1.3 - django-budget 0.7.2 - django-currentuser =0.1.0, =0.1.2, =1.5.0, =1.1.7, =0.0.1, =1.18.0, =1.20.0 and more Source cves...

fusionflow-upload (>=0.0.6, <=0.1.5) potentially affected by CVE-2026-15307 via django (2.2.7)

django PYPI version 2.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - fusionflow-upload =0.0.6, =0.1.5 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

geonode (4.4.5), mayan-edms (>=4.6.13, <=4.7.9) +4 more potentially affected by CVE-2026-15307 via django (4.2.29)

django PYPI version 4.2.29 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - geonode 4.4.5 - mayan-edms =4.6.13, =7.4.0, =7.4.0, =4.0.17, =4.0.18 - pheme 21.12.1 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-40...