django-rulengine (0.0.1), drf-httpsig (1.2.0) +2 more potentially affected by CVE-2026-48587 via django (1.7.0)

django PYPI version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-rulengine 0.0.1 - drf-httpsig 1.2.0 - tri-form 1.6.1 - tri-query 1.5.0 Source cves: CVE-2026-48587 Source advisory: OSV:GHSA-923M-GV2P-W5QP...

drf-tus (1.21.1), richie (0.1.0) potentially affected by CVE-2026-48587 via django (1.11.14)

django PYPI version 1.11.14 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - drf-tus 1.21.1 - richie 0.1.0 Source cves: CVE-2026-48587 Source advisory: OSV:GHSA-923M-GV2P-W5QP...

django-oscar-moysklad (>=0.2.0, <=0.2.3), drf-paytm (0.0.1) +3 more potentially affected by CVE-2026-6873 via django (2.1.3)

django PYPI version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-oscar-moysklad =0.2.0, =1.4.3, =1.6.5 Source cves: CVE-2026-6873 Source advisory: OSV:GHSA-H7PC-VWP9-298G...

django-rstblog (>=0.1.0, <=0.1.1), drf-user (0.0.1) +2 more potentially affected by CVE-2026-8404 via django (2.0.7)

django PYPI version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-rstblog =0.1.0, =0.1.1 - drf-user 0.0.1 - drfaddons 0.0.3 - umap-project 1.0.0rc1 Source cves: CVE-2026-8404 Source advisory:...

django-rulengine (0.0.1), drf-httpsig (1.2.0) +2 more potentially affected by CVE-2026-8404 via django (1.7.0)

django PYPI version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-rulengine 0.0.1 - drf-httpsig 1.2.0 - tri-form 1.6.1 - tri-query 1.5.0 Source cves: CVE-2026-8404 Source advisory: OSV:GHSA-8CJM-8MP7-R2XF...

CVE-2026-41519: Insufficient Session Expiration

Weblate is a web based localization tool. Prior to version 5.17.1, when a user changes their password, browser sessions are correctly invalidated via "cyclesessionkeys", but DRF API tokens "wlu" prefix stored in "authtokentoken" are not revoked. This issue has been patched in version 5.17.1...

aiohttp-ext-auth (>=0.1.1, <=0.1.2), ais-dom (>=0.76.5, <=0.91.5) +34 more potentially affected by CVE-2026-32597 via pyjwt (1.6.4)

pyjwt PYPI version 1.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - aiohttp-ext-auth =0.1.1, =0.76.5, =0.0.1, =0.0.1, =0.4.0, =1.0.0, =0.0.19, =0.5.0, =1.1.7, =0.31.0, =0.0.1, =0.0.2, =0.1.0 and more Source cves:...

dj-core-drf (0.1.0), django-zero (>=0.0.1, <=0.0.3) +1 more potentially affected by CVE-2026-27982 via django-allauth (0.34.0)

django-allauth PYPI version 0.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - dj-core-drf 0.1.0 - django-zero =0.0.1, =0.0.3 - openwisp-users 0.1.7 Source cves: CVE-2026-27982 Source advisory:...

dj-core-drf (>=0.0.4, <=0.0.8), openwisp-users (>=0.1.5, <=0.1.6) +1 more potentially affected by CVE-2026-27982 via django-allauth (0.33.0)

django-allauth PYPI version 0.33.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - dj-core-drf =0.0.4, =0.1.5, =0.0.6, =0.0.12 Source cves: CVE-2026-27982 Source advisory: OSV:GHSA-2JPR-83RG-V67J...

dj-core-drf (0.1.0), django-zero (>=0.0.1, <=0.0.3) +1 more potentially affected by CVE-2026-27982 via django-allauth (0.34.0)

django-allauth PYPI version 0.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - dj-core-drf 0.1.0 - django-zero =0.0.1, =0.0.3 - openwisp-users 0.1.7 Source cves: CVE-2026-27982 Source advisory: OSV:PYSEC-2026-5...

dj-core-drf (0.1.0), django-zero (>=0.0.1, <=0.0.3) +1 more potentially affected by CVE-2025-65431 via django-allauth (0.34.0)

django-allauth PYPI version 0.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - dj-core-drf 0.1.0 - django-zero =0.0.1, =0.0.3 - openwisp-users 0.1.7 Source cves: CVE-2025-65431 Source advisory:...

dj-core-drf (0.1.0), django-zero (>=0.0.1, <=0.0.3) +1 more potentially affected by CVE-2025-65430 via django-allauth (0.34.0)

django-allauth PYPI version 0.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - dj-core-drf 0.1.0 - django-zero =0.0.1, =0.0.3 - openwisp-users 0.1.7 Source cves: CVE-2025-65430 Source advisory:...

dj-core-drf (>=0.0.1, <=0.0.3), openwisp-users (0.1.4) potentially affected by CVE-2025-65431 via django-allauth (0.32.0)

django-allauth PYPI version 0.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - dj-core-drf =0.0.1, =0.0.3 - openwisp-users 0.1.4 Source cves: CVE-2025-65431 Source advisory: OSV:GHSA-8M3C-C723-H4P4...

dj-core-drf (>=0.0.1, <=0.0.3), openwisp-users (0.1.4) potentially affected by CVE-2025-65431 via django-allauth (0.32.0)

django-allauth PYPI version 0.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - dj-core-drf =0.0.1, =0.0.3 - openwisp-users 0.1.4 Source cves: CVE-2025-65431 Source advisory: OSV:PYSEC-2025-111...

dj-core-drf (>=0.0.4, <=0.0.8), openwisp-users (>=0.1.5, <=0.1.6) +1 more potentially affected by CVE-2025-65431 via django-allauth (0.33.0)

django-allauth PYPI version 0.33.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - dj-core-drf =0.0.4, =0.1.5, =0.0.6, =0.0.12 Source cves: CVE-2025-65431 Source advisory: OSV:PYSEC-2025-111...

django-rstblog (>=0.1.0, <=0.1.1), drf-user (0.0.1) +2 more potentially affected by CVE-2025-64459 via django (2.0.7)

django PYPI version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-rstblog =0.1.0, =0.1.1 - drf-user 0.0.1 - drfaddons 0.0.3 - umap-project 1.0.0rc1 Source cves: CVE-2025-64459 Source advisory:...

cosmicdbsemantic (>=0.0.1, <=0.0.23), drf-account (0.0.1) +3 more potentially affected by CVE-2025-64459 via django (2.0.5)

django PYPI version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - cosmicdbsemantic =0.0.1, =0.9.2, =0.9.5 Source cves: CVE-2025-64459 Source advisory: OSV:GHSA-FRMV-PR5F-9MCR...

django-oscar-moysklad (>=0.2.0, <=0.2.3), drf-paytm (0.0.1) +3 more potentially affected by CVE-2025-64459 via django (2.1.3)

django PYPI version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-oscar-moysklad =0.2.0, =1.4.3, =1.6.5 Source cves: CVE-2025-64459 Source advisory: OSV:GHSA-FRMV-PR5F-9MCR...

django-oscar-moysklad (>=0.2.0, <=0.2.3), drf-paytm (0.0.1) +3 more potentially affected by CVE-2025-64458 via django (2.1.3)

django PYPI version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-oscar-moysklad =0.2.0, =1.4.3, =1.6.5 Source cves: CVE-2025-64458 Source advisory: OSV:GHSA-QW25-V68C-QJF3...

drf-tus (1.21.1), richie (0.1.0) potentially affected by CVE-2025-64458 via django (1.11.14)

django PYPI version 1.11.14 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - drf-tus 1.21.1 - richie 0.1.0 Source cves: CVE-2025-64458 Source advisory: OSV:GHSA-QW25-V68C-QJF3...