ROOT-APP-PYPI-CVE-2026-15307 CVE-2026-15307 in django - Patched by Root

Root has patched CVE-2026-15307 in the django package for Root:PyPI. Multiple fixed versions available...

adarnauth-esi (>=1.4.0, <=1.4.2), aldryn-django-cms (3.5.3.2) +299 more potentially affected by CVE-2026-15307 via django (1.11.29)

django PYPI version 1.11.29 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - adarnauth-esi =1.4.0, =3.0.4, =1.2.0, =1.7.0, =0.0.6, =1.0.0, =1.2.1, =0.1.2, =0.2.0, =0.3.2 and more Source cves: CVE-2026-15307 Source advisory:...

edc (>=0.3.4, <=0.3.7), slack-request-permission (>=1.0.0, <=1.0.3) +2 more potentially affected by CVE-2026-15307 via django (3.1.6)

django PYPI version 3.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - edc =0.3.4, =1.0.0, =1.1.0, =0.11.0, =0.16.0 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

django-basic-auth-ip-whitelist (0.2.0), django-htmx-rest (0.0.1b1) +13 more potentially affected by CVE-2026-15307 via django (2.2.0)

django PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-basic-auth-ip-whitelist 0.2.0 - django-htmx-rest 0.0.1b1 - django-ios-storekit 1.0.6 - django-pb-model 0.1.8 - django-post-request-task 0.4.0...

arches (8.0.0a1), avaintegration-metapackage (>=6.0.4.3, <=6.0.5.36) +51 more potentially affected by CVE-2026-15307 via django (>=6.0.0a1, <=6.0.7)

django PYPI version =6.0.0a1, =6.0.4.3, =3.1.0, =2.0.0, =1.1.0, =1.2.1 and more Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

aimmo (>=1.3.2b678, <=1.3.3), cfl-common (>=5.26.5, <=5.29.1) +7 more potentially affected by CVE-2026-15307 via django (2.2.25)

django PYPI version 2.2.25 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aimmo =1.3.2b678, =5.26.5, =5.26.5, =0.9.9, =3.4.5, =3.5.7 - zfl-blogs 2.1.0 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

directory-constants (>=21.0.1, <=21.0.2), djongo (1.3.7) +2 more potentially affected by CVE-2026-15307 via django (3.1.12)

django PYPI version 3.1.12 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - directory-constants =21.0.1, =1.1.0rc0, =1.2.0 - rest-framework-djongo 0.1.7 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

django-microservice-common (>=0.1.0, <=0.1.7), djangodjangodjango (4.0.7) +3 more potentially affected by CVE-2026-15307 via django (4.0.7)

django PYPI version 4.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-microservice-common =0.1.0, =11.4.0, =0.1.0, =0.1.3 - tesla-ce 1.0.0 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

aimmo (>=0.61.9b59, <=0.67.1b256), caluma (6.7.0) +8 more potentially affected by CVE-2026-15307 via django (2.2.17)

django PYPI version 2.2.17 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aimmo =0.61.9b59, =4.15.0, =4.15.0, =0.0.8, =2.5.1, =1.24.11, =1.24.13 - umap-project 1.2.3 Source cves: CVE-2026-15307 Source advisory:...

atila-vue (>=0.1.3, <=0.1.3.5), contrail (>=0.3.0, <=1.0.2) +11 more potentially affected by CVE-2026-15307 via django (3.0.0rc1)

django PYPI version 3.0.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - atila-vue =0.1.3, =0.3.0, =0.1.1, =0.0.1, =0.0.1, =0.2.7, =0.2.0, =2.0.0, =2.3.1, =2.3.9 Source cves: CVE-2026-15307 Source advisory:...

aldryn-django (4.2.9.0), arches (>=7.6.0a0, <=7.6.0a1) +11 more potentially affected by CVE-2026-15307 via django (4.2.9)

django PYPI version 4.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aldryn-django 4.2.9.0 - arches =7.6.0a0, =0.1.0, =0.5.55, =1.4.0, =4.3.0, =0.64.0, =0.1.96, =0.1.0, =1.0.4, =1.0.5 Source cves: CVE-2026-15307 Sourc...

dj-saml-idp (>=1.1.0, <=1.2.1), django-conn-pool (1.11.1) +7 more potentially affected by CVE-2026-15307 via django (2.0.0rc1)

django PYPI version 2.0.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - dj-saml-idp =1.1.0, =4.3.1, =1.2.7, =0.0.3, =0.0.20, =0.1.0 - test-history-server 0.0.3 Source cves: CVE-2026-15307 Source advisory:...

cosmicdbsemantic (>=0.0.30, <=0.0.37), fiduswriter (>=3.7.0a4, <=3.7.0a5) +3 more potentially affected by CVE-2026-15307 via django (2.2.3)

django PYPI version 2.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - cosmicdbsemantic =0.0.30, =3.7.0a4, =0.1.1, =1.1.2, =1.1.6 - rdmo 0.14.5 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

blendedux (>=0.1.0, <=0.1.4), blendedux-lang (>=1.1.0, <=1.1.2) +15 more potentially affected by CVE-2026-15307 via django (4.1.7)

django PYPI version 4.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - blendedux =0.1.0, =1.1.0, =0.1.0, =0.5.0, =3.11.10, =1.0.0, =12.0.0, =1.3.2, =1.0.4, =32.0.1, =32.1.0 and more Source cves: CVE-2026-15307 Source...

aimmo (>=0.1.1a0.post0.dev60, <=0.1.1a0.post0.dev132), aldryn-boilerplates (0.7.4) +108 more potentially affected by CVE-2026-15307 via django (1.9.13)

django PYPI version 1.9.13 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aimmo =0.1.1a0.post0.dev60, =1.0.2, =1.1.1, =1.0.13, =1.0.7, =0.1.3, =0.2.0, =1.0.0, =0.2.136, =1.1.1, =1.2.1 and more Source cves: CVE-2026-15307...

argus-server (>=1.0.0, <=1.1.1), ariadne-extended (>=0.1.0, <=0.1.12) +117 more potentially affected by CVE-2026-15307 via django (3.0.14)

django PYPI version 3.0.14 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - argus-server =1.0.0, =0.1.0, =0.18.0, =2.8.0, =0.4.0, =3.0.1, =0.7.1, =0.2.0, =2.0.3, =3.0.1 and more Source cves: CVE-2026-15307 Source advisory:...

seed-auth-api (>=0.9.0, <=0.9.2), umap-project (>=0.8.0, <=0.8.3) potentially affected by CVE-2026-15307 via django (1.10.5)

django PYPI version 1.10.5 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - seed-auth-api =0.9.0, =0.8.0, =0.8.3 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

aldryn-django (4.2.7.0), cypartagraphqlsubscriptionstools (>=2.0.0, <=4.1.7) +14 more potentially affected by CVE-2026-15307 via django (4.2.7)

django PYPI version 4.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aldryn-django 4.2.7.0 - cypartagraphqlsubscriptionstools =2.0.0, =7.2.8, =0.22.1, =1.0.0, =2.5.3, =0.39.0, =2.0.1rc1, =0.38.0rc1, =21.8.0, =21.9.0 -...

aldryn-django (4.0.9.0), directory-constants (23.0.1) +4 more potentially affected by CVE-2026-15307 via django (4.0.9)

django PYPI version 4.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aldryn-django 4.0.9.0 - directory-constants 23.0.1 - directory-healthcheck 3.0.3 - django-codenerix =4.0.1, =4.0.8 - djangodjangodjango 4.0.9 -...

kodland-sso-server (>=0.1.1, <=0.3.0) potentially affected by CVE-2026-15307 via django (2.0.1)

django PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - kodland-sso-server =0.1.1, =0.3.0 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...