arches (=8.0.0a1), desktop-django-starter (=0.1.0) +33 more potentially affected by CVE-2026-4277 via django (>=6.0.0 <=6.0.3)

django PYPI version =6.0.0, =2.0.0, =1.1.0, =0.1.0, =0.1.0b2, =0.2.0b1 and more Source cves: CVE-2026-4277 Source advisory: OSV:GHSA-PWJP-CCJC-GHWG...

cg-django-uaa (=2.1.9), django-admin-flexlist (>=0.1.0 <=1.0.3) +11 more potentially affected by CVE-2025-32873 via django (>=5.2.0 <=5.2.0rc1)

django PYPI version =5.2.0, =0.1.0, =1.92.0.5, =4.2.0, =3.0.0, =0.1.0, =5.2.0, =1.0.0, =0.103.0, =1.2.4, =1.2.7 Source cves: CVE-2025-32873 Source advisory: OSV:PYSEC-2025-37...

aldryn-django (=4.2.10.0), am-report (=0.1.5) +81 more potentially affected by CVE-2024-38875 via django (>=4.2.0 <=4.2.13)

django PYPI version =4.2.0, =7.5.1, =0.0.1, =0.4.0, =5.2.0, =0.5.1, =0.12.2, =3.1.0, =7.2.2, =39.1.0, =39.1.4 and more Source cves: CVE-2024-38875 Source advisory: OSV:GHSA-QG2P-9JWR-MMQF...

UBUNTU-CVE-2021-33571

In Django 2.2 before 2.2.24, 3.x before 3.1.12, and 3.2 before 3.2.4, URLValidator, validateipv4address, and validateipv46address do not prohibit leading zero characters in octal literals. This may allow a bypass of access control that is based on IP addresses. validateipv4address and...

atila-vue (>=0.1.3 <=0.1.3.5), contrail (>=0.3.0 <=1.0.2) +27 more potentially affected by CVE-2020-24584 via django (>=3.0.0 <=3.0.0rc1)

django PYPI version =3.0.0, =0.1.3, =0.3.0, =0.1.1, =0.0.1, =0.0.1, =0.2.1, =0.8.0, =0.7.0, =0.10.0, =0.5.0, =0.6.4 and more Source cves: CVE-2020-24584 Source advisory: OSV:PYSEC-2020-34...

django-aesfield (=3.0.0), django-autoconfig (=0.8.0) +13 more potentially affected by CVE-2019-19118 via django (>=2.1.0 <=2.1.12)

django PYPI version =2.1.0, =0.1.0, =0.1.0, =0.3.0, =1.7.3, =0.0.3, =1.1.0, =0.1.2, =0.1.1, =1.0.0rc2, =0.1.0, =0.2.0.dev2 Source cves: CVE-2019-19118 Source advisory: OSV:GHSA-HVMF-R92R-27HR...