CVE-2026-48587 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, openstack-horizon-2026.1...

arches (8.0.0a1), avaintegration-metapackage (>=6.0.4.3, <=6.0.5.36) +45 more potentially affected by CVE-2026-48587 via django (>=6.0.0a1, <=6.0.5)

django PYPI version =6.0.0a1, =6.0.4.3, =2.0.0, =1.1.0, =0.1.0, =0.4.5 and more Source cves: CVE-2026-48587 Source advisory: SNYK:PYTHON-DJANGO-17151772...

django-avishan (>=0.2.42, <=0.3.23), django-nameko-standalone (2.0.1) +6 more potentially affected by CVE-2026-48587 via django (3.0.7)

django PYPI version 3.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-avishan =0.2.42, =0.5.6, =1.7.4, =1.8.0a1 Source cves: CVE-2026-48587 Source advisory: OSV:GHSA-923M-GV2P-W5QP...

admin-tool-button (>=1.0.1a0, <=1.0.5a0), apis-ampel (0.1.0) +43 more potentially affected by CVE-2026-48587 via django (3.2.0)

django PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - admin-tool-button =1.0.1a0, =0.2.0, =0.14.0, =0.13.0, =0.8.0, =0.9.16 and more Source cves: CVE-2026-48587 Source advisory: OSV:GHSA-923M-GV2P-W5QP...

djangodjangodjango (4.2.25), pheme (21.11.0) potentially affected by CVE-2026-48587 via django (4.2.25)

django PYPI version 4.2.25 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - djangodjangodjango 4.2.25 - pheme 21.11.0 Source cves: CVE-2026-48587 Source advisory: OSV:GHSA-923M-GV2P-W5QP...

aldryn-django (4.2.18.0), cfl-common (>=8.1.2, <=8.4.3) +6 more potentially affected by CVE-2026-48587 via django (4.2.18)

django PYPI version 4.2.18 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aldryn-django 4.2.18.0 - cfl-common =8.1.2, =1.9.1rc1, =21.10.2, =21.10.3 - vuln-demo-math-ops 1.0.0 Source cves: CVE-2026-48587 Source advisory:...

alastria-auth (>=0.0.3, <=0.0.17), credential (>=0.0.1, <=0.0.2) +11 more potentially affected by CVE-2026-48587 via django (4.1.3)

django PYPI version 4.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - alastria-auth =0.0.3, =0.0.1, =0.5.2.4, =0.0.1, =1.0.0rc0, =0.0.1, =0.1.4 - railguns 0.63.0 Source cves: CVE-2026-48587 Source advisory:...

adede (4.1.0), aldine (4.1.1) +195 more potentially affected by CVE-2026-48587 via django (4.1.13)

django PYPI version 4.1.13 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - adede 4.1.0 - aldine 4.1.1 - aldryn-django 4.1.13.0 - argus-server =1.10.0, =4.14.0, =4.1.0, =38.0.0rc0, =2.0.0, =0.0.1, =1.10.2, =0.1.0, =0.2.2 an...

aolab-aopy (>=0.6.3, <=0.9.3), aolab-bmi3d (>=1.0.0, <=1.2.4) +15 more potentially affected by CVE-2026-48587 via django (4.1.0)

django PYPI version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aolab-aopy =0.6.3, =1.0.0, =0.0.3, =0.1.0, =0.2.6, =2022.6.1, =1.0.0, =0.1.0, =1.0.0, =1.0.2 - sicksid-drf-tus 1.22.0 and more Source cves:...

djangodjangodjango (4.1.11) potentially affected by CVE-2026-48587 via django (4.1.11)

django PYPI version 4.1.11 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - djangodjangodjango 4.1.11 Source cves: CVE-2026-48587 Source advisory: OSV:GHSA-923M-GV2P-W5QP...

djangodjangodjango (4.2.0a1) potentially affected by CVE-2026-48587 via django (4.2.0a1)

django PYPI version 4.2.0a1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - djangodjangodjango 4.2.0a1 Source cves: CVE-2026-48587 Source advisory: OSV:GHSA-923M-GV2P-W5QP...

deepdataspace (>=0.0.1, <=0.0.2), django-qr-toolkit-core (>=4.0.0, <=4.1.3) +5 more potentially affected by CVE-2026-48587 via django (4.1.1)

django PYPI version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - deepdataspace =0.0.1, =4.0.0, =4.1.3 - django-sqlite-backup 0.1.0 - djangodjangodjango 4.1.1 - krptn 0.1.8 - railguns 0.60.0 - simmate 0.12.0 Source...

aa-charlink (>=0.1.1, <=1.0.0), aa-drifters (0.1.0a0) +177 more potentially affected by CVE-2026-48587 via django (4.0.10)

django PYPI version 4.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aa-charlink =0.1.1, =1.0.0b1, =0.1.0a0, =0.11.0a0, =0.1.1, =1.1.0, =3.1.1, =3.6.4, =0.10.0, =1.1.2, =1.7.0, =2.0.0, =0.24.0, =1.0.3 - coop 2.16.0 a...

aimmo (2.10.13), aldryn-django (3.2.22.0) +7 more potentially affected by CVE-2026-48587 via django (3.2.22)

django PYPI version 3.2.22 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aimmo 2.10.13 - aldryn-django 3.2.22.0 - cfl-common 6.39.6 - codeforlife-portal 6.39.6 - django-scientific-survey 0.3.3 - mayan-edms =4.4.9, =4.7.0...

aimmo (2.11.1), aldryn-django (3.2.24.0) +8 more potentially affected by CVE-2026-48587 via django (3.2.24)

django PYPI version 3.2.24 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aimmo 2.11.1 - aldryn-django 3.2.24.0 - arches =6.2.7, =0.0.3, =0.0.3, =6.40.1, =6.40.1, =2.2.5, =5.16.13, =5.16.20 Source cves: CVE-2026-48587...

autoreduce-frontend (>=22.0.0.dev22, <=22.0.0.dev23), django-rq-scheduler (2022.5.1) +4 more potentially affected by CVE-2026-48587 via django (4.0.4)

django PYPI version 4.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - autoreduce-frontend =22.0.0.dev22, =0.0.17, =0.7.15, =0.7.23 Source cves: CVE-2026-48587 Source advisory: OSV:GHSA-923M-GV2P-W5QP...

annalist (0.5.18), djangodjangodjango (4.0.3) +1 more potentially affected by CVE-2026-48587 via django (4.0.3)

django PYPI version 4.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - annalist 0.5.18 - djangodjangodjango 4.0.3 - railguns 0.56.0 Source cves: CVE-2026-48587 Source advisory: OSV:GHSA-923M-GV2P-W5QP...

aldryn-django (4.2.6.0), directory-api-client (26.4.3) +13 more potentially affected by CVE-2026-48587 via django (4.2.6)

django PYPI version 4.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aldryn-django 4.2.6.0 - directory-api-client 26.4.3 - directory-constants 23.1.2 - django-atris 2.0.2 - django-graphbox =1.2.8, =0.1.0, =0.30.0,...

aldryn-django (4.2.9.0), arches (>=7.6.0a0, <=7.6.0a1) +11 more potentially affected by CVE-2026-48587 via django (4.2.9)

django PYPI version 4.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aldryn-django 4.2.9.0 - arches =7.6.0a0, =0.1.0, =0.5.55, =1.4.0, =4.3.0, =0.64.0, =0.1.96, =0.1.0, =1.0.4, =1.0.5 Source cves: CVE-2026-48587 Sourc...

aimmo (>=0.0.0.post0.dev128, <=0.1.1a0.post0.dev58), aldryn-people (1.1.1) +57 more potentially affected by CVE-2026-48587 via django (1.8.19)

django PYPI version 1.8.19 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aimmo =0.0.0.post0.dev128, =0.3.0, =0.0.0rc1, =1.0.0rc2, =0.2.0, =0.1.0a2, =0.1.0, =3.1.1, =1.0.0rc2, =1.0.14a1, =1.0.27a1 - django-dform 0.5.0 and...