carbon-identity-framework

carbon-identity-framework Branch| Build Status ---|--- master| This repository contains the core components and features required by the WSO2 Identity Server product. Building from the source If you want to build carbon-identity-framework from the source code: 1. Install Java 21. 2. Install Apach...

Astra Linux – Vulnerability in Firefox

DOM spoofing issue: Core & HTML components. This vulnerability has been fixed in Firefox 152 and Thunderbird 152...

EUVD-2026-61288

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: WLS Core Components. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via RMI to compromis...

PT-2026-77444

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0 Description An issue in the WLS Core Components of Oracle Fusion Middleware allows an unauthenticated attacker with network access via RMI Remote Method Invocation, a Java A...

CVE-2026-60977: Improper Access Control

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: WLS Core Components. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via RMI to compromis...

Oracle WebLogic Server - Remote Code Execution Detection

Oracle WebLogic Server Oracle Fusion Middleware component: WLS Core Components is susceptible to a remote code execution vulnerability. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 2.2.1.3.0 and 12.2.1.4.0. This easily exploitable vulnerability could allow unauthenticated...

PYSEC-2026-220

Versions of the package dash-core-components before 2.13.0; all versions of the package dash-core-components; versions of the package dash before 2.15.0; all versions of the package dash-html-components; versions of the package dash-html-components before 2.0.16 are vulnerable to Cross-site...

interpret (>=0.0.2, <=0.1.13) potentially affected by CVE-2024-21485 via dash-core-components (0.44.0)

dash-core-components PYPI version 0.44.0 is affected by a known vulnerability. The following packages have a transitive dependency on dash-core-components and may be impacted: - interpret =0.0.2, =0.1.13 Source cves: CVE-2024-21485 Source advisory: OSV:PYSEC-2026-219...

tshistory-editor (>=0.5.0, <=0.8.1), tsview (>=0.6.0, <=0.11.0) potentially affected by CVE-2024-21485 via dash-core-components (1.0.0)

dash-core-components PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on dash-core-components and may be impacted: - tshistory-editor =0.5.0, =0.6.0, =0.11.0 Source cves: CVE-2024-21485 Source advisory: OSV:PYSEC-2026-219...

buzzword (>=1.2.1, <=1.2.3) potentially affected by CVE-2024-21485 via dash-core-components (1.1.1)

dash-core-components PYPI version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on dash-core-components and may be impacted: - buzzword =1.2.1, =1.2.3 Source cves: CVE-2024-21485 Source advisory: OSV:PYSEC-2026-219...

magani (2020.2.0) potentially affected by CVE-2024-21485 via dash-core-components (1.4.0)

dash-core-components PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on dash-core-components and may be impacted: - magani 2020.2.0 Source cves: CVE-2024-21485 Source advisory: OSV:PYSEC-2026-219...

tshistory-editor (>=0.2.0, <=0.4.0), tsview (>=0.2.0, <=0.2.1) potentially affected by CVE-2024-21485 via dash-core-components (0.22.1)

dash-core-components PYPI version 0.22.1 is affected by a known vulnerability. The following packages have a transitive dependency on dash-core-components and may be impacted: - tshistory-editor =0.2.0, =0.2.0, =0.2.1 Source cves: CVE-2024-21485 Source advisory: OSV:PYSEC-2026-219...

simba-uw-no-tf (>=1.2.9.2, <=1.3.0), simba-uw-tf-dev (>=0.70.0, <=5.6.1) potentially affected by CVE-2024-21485 via dash-core-components (1.10.2)

dash-core-components PYPI version 1.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on dash-core-components and may be impacted: - simba-uw-no-tf =1.2.9.2, =0.70.0, =5.6.1 Source cves: CVE-2024-21485 Source advisory: OSV:PYSEC-2026-219...

django-dash-ddx-catalog (>=0.1.0, <=0.1.1), shapash (>=1.0.0, <=1.7.1) potentially affected by CVE-2024-21485 via dash-core-components (1.13.0)

dash-core-components PYPI version 1.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on dash-core-components and may be impacted: - django-dash-ddx-catalog =0.1.0, =1.0.0, =1.7.1 Source cves: CVE-2024-21485 Source advisory: OSV:PYSEC-2026-219...

june (>=1.1.0, <=1.1.2), rarity (>=1.0.0.dev9, <=1.0.2) potentially affected by CVE-2024-21485 via dash-core-components (1.16.0)

dash-core-components PYPI version 1.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on dash-core-components and may be impacted: - june =1.1.0, =1.0.0.dev9, =1.0.2 Source cves: CVE-2024-21485 Source advisory: OSV:PYSEC-2026-219...

famcy (0.0.2), fn-graph-studio (>=0.1.0, <=0.10.5) +1 more potentially affected by CVE-2024-21485 via dash-core-components (1.17.1)

dash-core-components PYPI version 1.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on dash-core-components and may be impacted: - famcy 0.0.2 - fn-graph-studio =0.1.0, =0.2.0, =0.5.0 Source cves: CVE-2024-21485 Source advisory: OSV:PYSEC-2026-219...

divik (>=2.0.0b0, <=2.3.6) potentially affected by CVE-2024-21485 via dash-core-components (0.42.0)

dash-core-components PYPI version 0.42.0 is affected by a known vulnerability. The following packages have a transitive dependency on dash-core-components and may be impacted: - divik =2.0.0b0, =2.3.6 Source cves: CVE-2024-21485 Source advisory: OSV:PYSEC-2026-219...

echelon8-test (0.0.1) potentially affected by CVE-2024-21485 via dash-core-components (0.22.2)

dash-core-components PYPI version 0.22.2 is affected by a known vulnerability. The following packages have a transitive dependency on dash-core-components and may be impacted: - echelon8-test 0.0.1 Source cves: CVE-2024-21485 Source advisory: OSV:PYSEC-2026-219...

datadriver (>=0.1.0, <=0.1.3), ddui (3.0.4) potentially affected by CVE-2024-21485 via dash-core-components (0.43.1)

dash-core-components PYPI version 0.43.1 is affected by a known vulnerability. The following packages have a transitive dependency on dash-core-components and may be impacted: - datadriver =0.1.0, =0.1.3 - ddui 3.0.4 Source cves: CVE-2024-21485 Source advisory: OSV:PYSEC-2026-219...

dash-tokamak (1.6.0) potentially affected by CVE-2024-21485 via dash-core-components (1.5.0)

dash-core-components PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on dash-core-components and may be impacted: - dash-tokamak 1.6.0 Source cves: CVE-2024-21485 Source advisory: OSV:PYSEC-2026-219...