mycms (>=0.1.9, <=0.1.12) potentially affected by CVE-2026-57178 via social-auth-core (3.3.3)

social-auth-core PYPI version 3.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - mycms =0.1.9, =0.1.12 Source cves: CVE-2026-57178 Source advisory: OSV:PYSEC-2026-4165...

umap-project (>=2.0.0a3, <=2.2.0b0) potentially affected by CVE-2026-57178 via social-auth-core (4.5.3)

social-auth-core PYPI version 4.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - umap-project =2.0.0a3, =2.2.0b0 Source cves: CVE-2026-57178 Source advisory: OSV:PYSEC-2026-4165...

linhub (0.1.1) potentially affected by CVE-2026-57178 via social-auth-core (4.4.1)

social-auth-core PYPI version 4.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - linhub 0.1.1 Source cves: CVE-2026-57178 Source advisory: OSV:PYSEC-2026-4165...

misago (>=0.39.0, <=0.39.6) potentially affected by CVE-2026-57178 via social-auth-core (4.5.1)

social-auth-core PYPI version 4.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - misago =0.39.0, =0.39.6 Source cves: CVE-2026-57178 Source advisory: OSV:PYSEC-2026-4165...

umap-project (>=1.0.0rc9, <=1.0.0) potentially affected by CVE-2026-57178 via social-auth-core (3.0.0)

social-auth-core PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - umap-project =1.0.0rc9, =1.0.0 Source cves: CVE-2026-57178 Source advisory: OSV:PYSEC-2026-4165...

umap-project (3.1.0) potentially affected by CVE-2026-57178 via social-auth-core (4.6.1)

social-auth-core PYPI version 4.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - umap-project 3.1.0 Source cves: CVE-2026-57178 Source advisory: OSV:PYSEC-2026-4165...

umap-project (>=2.0.0a0, <=2.0.0a2) potentially affected by CVE-2026-57178 via social-auth-core (4.5.2)

social-auth-core PYPI version 4.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - umap-project =2.0.0a0, =2.0.0a2 Source cves: CVE-2026-57178 Source advisory: OSV:PYSEC-2026-4165...

CVE-2026-57178

creationtimestamp| type| source ---|---|--- 2026-09-24 22:30:32+00:00| seen| https://gist.github.com/alon710/16f5dd43c99d69c085ca2b85bb1225f7...

mycms (>=0.1.9, <=0.1.12) potentially affected by CVE-2026-57178 via social-auth-core (3.3.3)

social-auth-core PYPI version 3.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - mycms =0.1.9, =0.1.12 Source cves: CVE-2026-57178 Source advisory: OSV:GHSA-3C93-F73F-QC9H...

umap-project (>=0.8.0, <=0.8.2) potentially affected by CVE-2026-57178 via social-auth-core (1.1.0)

social-auth-core PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - umap-project =0.8.0, =0.8.2 Source cves: CVE-2026-57178 Source advisory: OSV:GHSA-3C93-F73F-QC9H...

umap-project (>=1.1.0, <=1.1.2) potentially affected by CVE-2026-57178 via social-auth-core (3.1.0)

social-auth-core PYPI version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - umap-project =1.1.0, =1.1.2 Source cves: CVE-2026-57178 Source advisory: OSV:GHSA-3C93-F73F-QC9H...

masonite-socialite (>=0.0.1, <=0.0.5), richie (>=2.0.0b9, <=2.7.1) potentially affected by CVE-2026-57178 via social-auth-core (3.2.0)

social-auth-core PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - masonite-socialite =0.0.1, =2.0.0b9, =2.7.1 Source cves: CVE-2026-57178 Source advisory: OSV:GHSA-3C93-F73F-QC9H...

umap-project (>=1.3.0a0, <=1.14.0a5) potentially affected by CVE-2026-57178 via social-auth-core (4.4.2)

social-auth-core PYPI version 4.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - umap-project =1.3.0a0, =1.14.0a5 Source cves: CVE-2026-57178 Source advisory: OSV:GHSA-3C93-F73F-QC9H...

misago (>=0.37.0, <=0.39.0b1) potentially affected by CVE-2026-57178 via social-auth-core (4.5.0)

social-auth-core PYPI version 4.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - misago =0.37.0, =0.39.0b1 Source cves: CVE-2026-57178 Source advisory: OSV:GHSA-3C93-F73F-QC9H...

argus-server (>=1.23.0, <=1.34.1), bitcaster (>=2.1.0rc1, <=2.2.0) +14 more potentially affected by CVE-2026-57178 via social-auth-core (4.8.7)

social-auth-core PYPI version 4.8.7 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - argus-server =1.23.0, =2.1.0rc1, =2.4.6, =2.0.9, =1.0.1, =0.16.0, =2024.1.0, =1.62.0, =5.7.0, =0.10.0, =5.6.0, =0.1.0, =0.12.0 a...

umap-project (>=1.0.0rc9, <=1.0.0) potentially affected by CVE-2026-57178 via social-auth-core (3.0.0)

social-auth-core PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - umap-project =1.0.0rc9, =1.0.0 Source cves: CVE-2026-57178 Source advisory: OSV:GHSA-3C93-F73F-QC9H...

b9gemyaeix (>=4.14.0, <=4.14.1), edx-oauth2-wordpress-backend (>=1.0.7, <=1.0.8) +15 more potentially affected by CVE-2026-57178 via social-auth-core (4.3.0)

social-auth-core PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - b9gemyaeix =4.14.0, =1.0.7, =1.0.0, =1.0.0, =1.0.0rc1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =3.5.0rc4, =4.0.0rc6,...

umap-project (>=2.0.0a0, <=2.0.0a2) potentially affected by CVE-2026-57178 via social-auth-core (4.5.2)

social-auth-core PYPI version 4.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - umap-project =2.0.0a0, =2.0.0a2 Source cves: CVE-2026-57178 Source advisory: OSV:GHSA-3C93-F73F-QC9H...

UBUNTU-CVE-2026-57178

Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the vk-app backend accepted VK application callback data without verifying the callback signature when the authkey parameter was omitted. Applications using this backend could treat unsigned...

argilla-server (>=1.24.0rc3, <=2.8.0), argus-notification-msteams (0.5.1) +136 more potentially affected by CVE-2026-57178 via social-auth-core (>=0.2.1, <=4.9.1)

social-auth-core PYPI version =0.2.1, =1.24.0rc3, =1.2.1, =4.14.0, =2.1.0rc1, =1.28.0rc1, =0.15.0, =1.234.0, =0.3.23, =0.8.7, =0.0.2a17, =0.1.0, =1.0.0, =2.2.0a0, =2.3.4 and more Source cves: CVE-2026-57178 Source advisory: MEND:CVE-2026-57178...