python313-Django5-5.2.17-1.1 on GA media (moderate)

python313-Django5-5.2.17-1.1 on GA media Announcement ID: openSUSE-SU-2026:11491-1 Rating: moderate Cross-References: CVE-2026-15307 CVE-2026-15337 CVE-2026-15830 CVE-2026-15920 CVSS scores: CVE-2026-15307 SUSE : 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2026-15307 SUSE : 9.3...

SUSE SLES15 Security Update : python-Django (SUSE-SU-2026:3503-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3503-1 advisory. - CVE-2026-15307: server-side file-write and request forgery via spatial lookups bsc1272997. - CVE-2026-15337: potential denial-of-service...

django-microservice-common (>=0.1.0, <=0.1.7), djangodjangodjango (4.0.7) +3 more potentially affected by CVE-2026-15830 via django (4.0.7)

django PYPI version 4.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-microservice-common =0.1.0, =11.4.0, =0.1.0, =0.1.3 - tesla-ce 1.0.0 Source cves: CVE-2026-15830 Source advisory: OSV:GHSA-Q238-5CXM-5C9H...

salmon (0.2.0) potentially affected by CVE-2026-15830 via django (1.6.1)

django PYPI version 1.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - salmon 0.2.0 Source cves: CVE-2026-15830 Source advisory: OSV:GHSA-Q238-5CXM-5C9H...

boorunaut (0.4.2), shipmnts-utils (>=0.0.1, <=0.0.4) +1 more potentially affected by CVE-2026-15830 via django (2.1.4)

django PYPI version 2.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - boorunaut 0.4.2 - shipmnts-utils =0.0.1, =0.0.4 - upload-manager 1.3.0 Source cves: CVE-2026-15830 Source advisory: OSV:GHSA-Q238-5CXM-5C9H...

aimmo (>=0.69.11b455, <=1.3.1), cfl-common (>=4.30.11, <=5.26.4) +6 more potentially affected by CVE-2026-15830 via django (2.2.24)

django PYPI version 2.2.24 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aimmo =0.69.11b455, =4.30.11, =4.30.11, =0.1.1, =0.9.7, =3.11.0, =2.0.0, =2.7.7, =3.4.4 Source cves: CVE-2026-15830 Source advisory:...

django-database-postgresql-aad-backend (0.0.1), django-ts-bridge (>=0.0.1, <=1.0.2) +9 more potentially affected by CVE-2026-15830 via django (3.1.5)

django PYPI version 3.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-database-postgresql-aad-backend 0.0.1 - django-ts-bridge =0.0.1, =1.0.1, =0.3.0, =0.0.1, =0.9.0, =2.2.0, =0.9.2, =0.10.1 Source cves:...

aimmo (>=0.67.1b259, <=0.69.1), cfl-common (>=4.21.3, <=4.28.3) +5 more potentially affected by CVE-2026-15830 via django (2.2.18)

django PYPI version 2.2.18 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aimmo =0.67.1b259, =4.21.3, =4.21.3, =0.13.0, =2.5.7, =2.6.0 Source cves: CVE-2026-15830 Source advisory: OSV:GHSA-Q238-5CXM-5C9H...

django-admin-caching (0.1.3), django-budget (0.7.2) +19 more potentially affected by CVE-2026-15830 via django (1.11.0)

django PYPI version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-admin-caching 0.1.3 - django-budget 0.7.2 - django-currentuser =0.1.0, =0.1.2, =1.5.0, =1.1.7, =0.0.1, =1.18.0, =1.20.0 and more Source cves...

aolab-aopy (>=0.6.3, <=0.9.3), aolab-bmi3d (>=1.0.0, <=1.2.4) +15 more potentially affected by CVE-2026-15830 via django (4.1.0)

django PYPI version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aolab-aopy =0.6.3, =1.0.0, =0.0.3, =0.1.0, =0.2.6, =2022.6.1, =1.0.0, =0.1.0, =1.0.0, =1.0.2 - sicksid-drf-tus 1.22.0 and more Source cves:...

arches (7.6.0a2), coldfront (1.1.6) +12 more potentially affected by CVE-2026-15830 via django (4.2.11)

django PYPI version 4.2.11 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - arches 7.6.0a2 - coldfront 1.1.6 - django-graphbox =1.4.1, =0.5.73, =0.2.14, =4.6.2, =0.3.6, =6.0.0, =6.0.2, =0.2.0, =0.2.0a0, =0.2.0rc1 Source cve...

aimmo (>=0.1.1a0.post0.dev60, <=0.1.1a0.post0.dev132), aldryn-boilerplates (0.7.4) +108 more potentially affected by CVE-2026-15830 via django (1.9.13)

django PYPI version 1.9.13 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aimmo =0.1.1a0.post0.dev60, =1.0.2, =1.1.1, =1.0.13, =1.0.7, =0.1.3, =0.2.0, =1.0.0, =0.2.136, =1.1.1, =1.2.1 and more Source cves: CVE-2026-15830...

familiar (0.1.4), kiwitcms (>=8.1.0, <=8.1.99) potentially affected by CVE-2026-15830 via django (3.0.4)

django PYPI version 3.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - familiar 0.1.4 - kiwitcms =8.1.0, =8.1.99 Source cves: CVE-2026-15830 Source advisory: OSV:GHSA-Q238-5CXM-5C9H...

aimmo (2.11.1), aldryn-django (3.2.24.0) +8 more potentially affected by CVE-2026-15830 via django (3.2.24)

django PYPI version 3.2.24 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aimmo 2.11.1 - aldryn-django 3.2.24.0 - arches =6.2.7, =0.0.3, =0.0.3, =6.40.1, =6.40.1, =2.2.5, =5.16.13, =5.16.20 Source cves: CVE-2026-15830...

aimmo (0.1.1a0.post0.dev59), seed-control-interface (>=0.9.0, <=0.9.15) potentially affected by CVE-2026-15830 via django (1.9.12)

django PYPI version 1.9.12 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aimmo 0.1.1a0.post0.dev59 - seed-control-interface =0.9.0, =0.9.15 Source cves: CVE-2026-15830 Source advisory: OSV:GHSA-Q238-5CXM-5C9H...

django-basic-auth-ip-whitelist (0.2.0), django-htmx-rest (0.0.1b1) +13 more potentially affected by CVE-2026-15830 via django (2.2.0)

django PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-basic-auth-ip-whitelist 0.2.0 - django-htmx-rest 0.0.1b1 - django-ios-storekit 1.0.6 - django-pb-model 0.1.8 - django-post-request-task 0.4.0...

edc (>=0.3.4, <=0.3.7), slack-request-permission (>=1.0.0, <=1.0.3) +2 more potentially affected by CVE-2026-15830 via django (3.1.6)

django PYPI version 3.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - edc =0.3.4, =1.0.0, =1.1.0, =0.11.0, =0.16.0 Source cves: CVE-2026-15830 Source advisory: OSV:GHSA-Q238-5CXM-5C9H...

alcali (>=2018.3.3, <=2019.2.3), ambition-edc (0.3.62) +7 more potentially affected by CVE-2026-15830 via django (2.2.8)

django PYPI version 2.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - alcali =2018.3.3, =0.0.2, =7.2.0, =7.2.1 - seed-auth-api 0.9.8 - seed-control-interface 0.9.18 Source cves: CVE-2026-15830 Source advisory:...

djangodjangodjango (4.2.0a1) potentially affected by CVE-2026-15830 via django (4.2.0a1)

django PYPI version 4.2.0a1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - djangodjangodjango 4.2.0a1 Source cves: CVE-2026-15830 Source advisory: OSV:GHSA-Q238-5CXM-5C9H...

deepdataspace (>=0.0.1, <=0.0.2), django-qr-toolkit-core (>=4.0.0, <=4.1.3) +5 more potentially affected by CVE-2026-15830 via django (4.1.1)

django PYPI version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - deepdataspace =0.0.1, =4.0.0, =4.1.3 - django-sqlite-backup 0.1.0 - djangodjangodjango 4.1.1 - krptn 0.1.8 - railguns 0.60.0 - simmate 0.12.0 Source...