Security update for python-Django (important)

openSUSE security update: security update for python-django ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20937-1 Rating: important References: bsc1267576 bsc1267577 bsc1267578 bsc1267579 bsc1267580 Cross-References: CVE-2026-35193 CVE-2026-48587...

aldryn-django (4.2.10.0), arches (7.5.1) +17 more potentially affected by CVE-2026-8404 via django (4.2.10)

django PYPI version 4.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aldryn-django 4.2.10.0 - arches 7.5.1 - cpu-utilization-monitoring 0.1.3 - deepdataspace =0.12.2, =0.5.65, =0.1.43, =0.2.4, =1.5.2.dev14, =0.3.2,...

gerapy (>=0.8.7, <=0.9.3a2), ora2 (2.4.4) potentially affected by CVE-2026-8404 via django (1.11.26)

django PYPI version 1.11.26 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - gerapy =0.8.7, =0.9.3a2 - ora2 2.4.4 Source cves: CVE-2026-8404 Source advisory: OSV:GHSA-8CJM-8MP7-R2XF...

aldryn-django (4.2.7.0), cypartagraphqlsubscriptionstools (>=2.0.0, <=4.1.7) +14 more potentially affected by CVE-2026-8404 via django (4.2.7)

django PYPI version 4.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aldryn-django 4.2.7.0 - cypartagraphqlsubscriptionstools =2.0.0, =7.2.8, =0.22.1, =1.0.0, =2.5.3, =0.39.0, =2.0.1rc1, =0.38.0rc1, =21.8.0, =21.9.0 -...

alcali (>=2018.3.4, <=2019.2.4.post0), django-acsecure (0.1.3) +12 more potentially affected by CVE-2026-8404 via django (3.0.3)

django PYPI version 3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - alcali =2018.3.4, =0.2.0, =0.1.5.1, =0.0.2, =0.1.1, =0.9.0, =0.1.0.1, =0.4.1, =0.5.1 Source cves: CVE-2026-8404 Source advisory:...

aimmo (>=0.69.11b455, <=1.3.1), cfl-common (>=4.30.11, <=5.26.4) +6 more potentially affected by CVE-2026-8404 via django (2.2.24)

django PYPI version 2.2.24 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aimmo =0.69.11b455, =4.30.11, =4.30.11, =0.1.1, =0.9.7, =3.11.0, =2.0.0, =2.7.7, =3.4.4 Source cves: CVE-2026-8404 Source advisory:...

ambition-edc (>=0.3.68, <=0.3.72), caluma (>=5.2.1, <=5.3.1) +9 more potentially affected by CVE-2026-8404 via django (2.2.10)

django PYPI version 2.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - ambition-edc =0.3.68, =5.2.1, =0.1.4, =0.0.1, =0.0.6, =0.1.3, =0.1.2, =2.0.0, =0.3.0, =0.6.4 Source cves: CVE-2026-8404 Source advisory:...

boorunaut (>=0.1.0, <=0.4.1), coldfront (0.0.2) +10 more potentially affected by CVE-2026-8404 via django (2.1.2)

django PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - boorunaut =0.1.0, =0.31.0, =0.16.0, =1.0.0, =1.24.0, =1.0.0rc7, =1.0.0rc8 - warriorframework 4.2.0 Source cves: CVE-2026-8404 Source advisory:...

capreolus (>=0.1.0, <=0.1.1), django-magic-fortmatic (>=0.0.1, <=0.0.3) +4 more potentially affected by CVE-2026-8404 via django (2.2.1)

django PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - capreolus =0.1.0, =0.0.1, =6.8.0, =0.8.0, =0.12.0 - umap-project 1.1.2 Source cves: CVE-2026-8404 Source advisory: OSV:GHSA-8CJM-8MP7-R2XF...

aldryn-django (4.2.6.0), directory-api-client (26.4.3) +13 more potentially affected by CVE-2026-8404 via django (4.2.6)

django PYPI version 4.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aldryn-django 4.2.6.0 - directory-api-client 26.4.3 - directory-constants 23.1.2 - django-atris 2.0.2 - django-graphbox =1.2.8, =0.1.0, =0.30.0,...

django-manifold (0.1.0), saltdash (0.9.1) potentially affected by CVE-2026-8404 via django (2.0.3)

django PYPI version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-manifold 0.1.0 - saltdash 0.9.1 Source cves: CVE-2026-8404 Source advisory: OSV:GHSA-8CJM-8MP7-R2XF...

cfl-common (>=8.4.4, <=8.5.1), codeforlife (>=0.25.17, <=0.25.22) +7 more potentially affected by CVE-2026-8404 via django (4.2.20)

django PYPI version 4.2.20 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - cfl-common =8.4.4, =0.25.17, =8.4.5, =1.10.0rc3, =7.1.0, =7.1.0, =7.4.0, =7.4.7 Source cves: CVE-2026-8404 Source advisory: OSV:GHSA-8CJM-8MP7-R2XF...

ambition-edc (>=0.3.63, <=0.3.66), capreolus (0.1.3) +7 more potentially affected by CVE-2026-8404 via django (2.2.9)

django PYPI version 2.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - ambition-edc =0.3.63, =1.1.35, =1.13.0.dev5, =0.1.0, =2.1.0, =2.2.1 Source cves: CVE-2026-8404 Source advisory: OSV:GHSA-8CJM-8MP7-R2XF...

aimmo (>=1.4.6b782, <=1.4.11), cfl-common (>=5.33.4, <=5.43.0) +7 more potentially affected by CVE-2026-8404 via django (2.2.27)

django PYPI version 2.2.27 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aimmo =1.4.6b782, =5.33.4, =5.33.5, =3.15.0, =1.1.0, =1.0.0, =2.0.2, =3.7.2, =3.8.9 - taccsite-cms 3.6.0a0 Source cves: CVE-2026-8404 Source...

crudxworkertejas1899 (0.4.0), djangodjangodjango (4.1.4) +1 more potentially affected by CVE-2026-8404 via django (4.1.4)

django PYPI version 4.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - crudxworkertejas1899 0.4.0 - djangodjangodjango 4.1.4 - railguns 0.64.0 Source cves: CVE-2026-8404 Source advisory: OSV:GHSA-8CJM-8MP7-R2XF...

connect-telegram-bot (>=1.0.0, <=1.0.1), nemo (>=3.9.0, <=3.9.1) +1 more potentially affected by CVE-2026-8404 via django (2.2.19)

django PYPI version 2.2.19 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - connect-telegram-bot =1.0.0, =3.9.0, =1.0.3, =1.0.6 Source cves: CVE-2026-8404 Source advisory: OSV:GHSA-8CJM-8MP7-R2XF...

am-report (0.1.5), apexx (0.0.2) +11 more potentially affected by CVE-2026-8404 via django (4.2.13)

django PYPI version 4.2.13 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - am-report 0.1.5 - apexx 0.0.2 - ddaemon-core-python =0.5.1, =0.1.0, =4.6.5, =0.15.0, =0.1.5, =1.0.1, =0.1.4, =0.1.5.83 Source cves: CVE-2026-8404...

djangodjangodjango (4.1.0b1) potentially affected by CVE-2026-8404 via django (4.1.0b1)

django PYPI version 4.1.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - djangodjangodjango 4.1.0b1 Source cves: CVE-2026-8404 Source advisory: OSV:GHSA-8CJM-8MP7-R2XF...

aimmo (>=0.67.1b259, <=0.69.1), cfl-common (>=4.21.3, <=4.28.3) +5 more potentially affected by CVE-2026-8404 via django (2.2.18)

django PYPI version 2.2.18 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aimmo =0.67.1b259, =4.21.3, =4.21.3, =0.13.0, =2.5.7, =2.6.0 Source cves: CVE-2026-8404 Source advisory: OSV:GHSA-8CJM-8MP7-R2XF...

koalix-crm (1.12.1), nemo (1.14.1) potentially affected by CVE-2026-8404 via django (1.11.21)

django PYPI version 1.11.21 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - koalix-crm 1.12.1 - nemo 1.14.1 Source cves: CVE-2026-8404 Source advisory: OSV:GHSA-8CJM-8MP7-R2XF...