CVE-2026-6873 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, openstack-horizon-2026.1...

Security update for python-Django (important)

openSUSE security update: security update for python-django ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20937-1 Rating: important References: bsc1267576 bsc1267577 bsc1267578 bsc1267579 bsc1267580 Cross-References: CVE-2026-35193 CVE-2026-48587...

11x-wagtail-blog (>=0.0.0, <=0.2.0), aldryn-django (>=5.0.2.0, <=5.1.5.0) +446 more potentially affected by CVE-2026-6873 via django (>=5.0.0a1, <=5.2.14)

django PYPI version =5.0.0a1, =0.0.0, =5.0.2.0, =0.0.15, =0.42.1, =1.0.0, =1.14.3, =0.0.20, =0.0.13, =0.0.19, =0.0.34, =0.0.50, =0.0.51 and more Source cves: CVE-2026-6873 Source advisory: SNYK:PYTHON-DJANGO-17151728...

arches (8.0.0a1), avaintegration-metapackage (>=6.0.4.3, <=6.0.5.36) +45 more potentially affected by CVE-2026-6873 via django (>=6.0.0a1, <=6.0.5)

django PYPI version =6.0.0a1, =6.0.4.3, =2.0.0, =1.1.0, =0.1.0, =0.4.5 and more Source cves: CVE-2026-6873 Source advisory: SNYK:PYTHON-DJANGO-17151728...

ariadne-jwt (>=0.1.0, <=0.1.3), balder (0.1.24) +28 more potentially affected by CVE-2026-6873 via django (3.1.0)

django PYPI version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - ariadne-jwt =0.1.0, =20.13.1, =0.1.0, =0.10.0, =0.9.0, =0.4.0, =0.12.0, =0.5.0, =0.7.0, =0.8.0, =2.0.4, =2.0.6 and more Source cves: CVE-2026-6873...

auth-token-django (>=0.0.1, <=0.0.5), directory-constants (23.1.0) +7 more potentially affected by CVE-2026-6873 via django (4.2.1)

django PYPI version 4.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - auth-token-django =0.0.1, =2.0.0rc15, =0.0.18, =0.2.1, =1.2.8 Source cves: CVE-2026-6873 Source advisory: OSV:GHSA-H7PC-VWP9-298G...

deepdataspace (>=0.0.1, <=0.0.2), django-qr-toolkit-core (>=4.0.0, <=4.1.3) +5 more potentially affected by CVE-2026-6873 via django (4.1.1)

django PYPI version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - deepdataspace =0.0.1, =4.0.0, =4.1.3 - django-sqlite-backup 0.1.0 - djangodjangodjango 4.1.1 - krptn 0.1.8 - railguns 0.60.0 - simmate 0.12.0 Source...

djangodjangodjango (4.1.0b1) potentially affected by CVE-2026-6873 via django (4.1.0b1)

django PYPI version 4.1.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - djangodjangodjango 4.1.0b1 Source cves: CVE-2026-6873 Source advisory: OSV:GHSA-H7PC-VWP9-298G...

arches (7.6.0a2), coldfront (1.1.6) +12 more potentially affected by CVE-2026-6873 via django (4.2.11)

django PYPI version 4.2.11 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - arches 7.6.0a2 - coldfront 1.1.6 - django-graphbox =1.4.1, =0.5.73, =0.2.14, =4.6.2, =0.3.6, =6.0.0, =6.0.2, =0.2.0, =0.2.0a0, =0.2.0rc1 Source cve...

aistudio-scheduler-lock (>=1.0.0, <=1.0.5), autoreduce-db (>=22.0.0.dev7, <=22.0.0.dev11) +11 more potentially affected by CVE-2026-6873 via django (3.2.6)

django PYPI version 3.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aistudio-scheduler-lock =1.0.0, =22.0.0.dev7, =22.0.0.dev7, =22.0.0.dev14, =0.0.1, =2.2.2, =0.1.0, =0.0.1, =1.0.0 - schedulerlock 0.1.4 - terra-cola...

aimmo (2.11.1), aldryn-django (3.2.24.0) +8 more potentially affected by CVE-2026-6873 via django (3.2.24)

django PYPI version 3.2.24 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aimmo 2.11.1 - aldryn-django 3.2.24.0 - arches =6.2.7, =0.0.3, =0.0.3, =6.40.1, =6.40.1, =2.2.5, =5.16.13, =5.16.20 Source cves: CVE-2026-6873 Sour...

django-magnificent-messages (>=0.1.2, <=0.1.4), fiduswriter (3.7.0rc4) +5 more potentially affected by CVE-2026-6873 via django (2.2.4)

django PYPI version 2.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-magnificent-messages =0.1.2, =0.0.0, =0.9.6, =0.9.16, =0.9.17 Source cves: CVE-2026-6873 Source advisory: OSV:GHSA-H7PC-VWP9-298G...

alcali (>=2018.3.2, <=2019.2.2), botbuilder-applicationinsights (>=4.7.0, <=4.14.2) +4 more potentially affected by CVE-2026-6873 via django (2.2.6)

django PYPI version 2.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - alcali =2018.3.2, =4.7.0, =4.10.0, =4.14.2 - kiwitcms 7.1.0 - ls-orb 0.1.0 - wazimap 2.1.0 Source cves: CVE-2026-6873 Source advisory:...

django-basic-auth-ip-whitelist (>=0.2.1, <=0.3.1), django-chats (0.2.2) +14 more potentially affected by CVE-2026-6873 via django (3.0.0)

django PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-basic-auth-ip-whitelist =0.2.1, =0.8.0, =0.7.0, =0.10.0, =0.5.0, =0.6.1, =0.7.0, =0.4.1, =1.0.1, =1.0.2 and more Source cves: CVE-2026-6873...

django-admin-caching (0.1.3), django-budget (0.7.2) +19 more potentially affected by CVE-2026-6873 via django (1.11.0)

django PYPI version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-admin-caching 0.1.3 - django-budget 0.7.2 - django-currentuser =0.1.0, =0.1.2, =1.5.0, =1.1.7, =0.0.1, =1.18.0, =1.20.0 and more Source cves...

django-autoconfig (0.8.0) potentially affected by CVE-2026-6873 via django (2.1.0rc1)

django PYPI version 2.1.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-autoconfig 0.8.0 Source cves: CVE-2026-6873 Source advisory: OSV:GHSA-H7PC-VWP9-298G...

aimmo (0.1.1a0.post0.dev59), seed-control-interface (>=0.9.0, <=0.9.15) potentially affected by CVE-2026-6873 via django (1.9.12)

django PYPI version 1.9.12 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aimmo 0.1.1a0.post0.dev59 - seed-control-interface =0.9.0, =0.9.15 Source cves: CVE-2026-6873 Source advisory: OSV:GHSA-H7PC-VWP9-298G...

djangodjangodjango (4.0.0a1) potentially affected by CVE-2026-6873 via django (4.0.0a1)

django PYPI version 4.0.0a1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - djangodjangodjango 4.0.0a1 Source cves: CVE-2026-6873 Source advisory: OSV:GHSA-H7PC-VWP9-298G...

django-email-testview (>=0.0.1, <=0.1.0), django-polls-tutorial-v (>=1.0.1, <=1.2.6) +4 more potentially affected by CVE-2026-6873 via django (2.2.2)

django PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-email-testview =0.0.1, =1.0.1, =0.1.0, =1.0.1, =21.4.0rc1, =21.4.0rc4 Source cves: CVE-2026-6873 Source advisory: OSV:GHSA-H7PC-VWP9-298G...

kodland-sso-server (>=0.1.1, <=0.3.0) potentially affected by CVE-2026-6873 via django (2.0.1)

django PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - kodland-sso-server =0.1.1, =0.3.0 Source cves: CVE-2026-6873 Source advisory: OSV:GHSA-H7PC-VWP9-298G...