arthexis (>=0.1.3, <=0.11.0), ayugespidertools (>=3.13.4, <=3.14.1) +24 more potentially affected by CVE-2026-106454 via twisted (25.5.0)

twisted PYPI version 25.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - arthexis =0.1.3, =3.13.4, =1.4.0, =2.11.0, =2.7.0, =2.4.0, =1.0.7, =1.10.0, =0.28.0, =1.0.0, =1.57.0, =1.57.1 and more Source cves: CVE-2026-1064...

anomalydetection (0.0.0.dev1), ckanext-ldap (>=3.1.2, <=4.1.3) +26 more potentially affected by CVE-2025-61912 via python-ldap (>=3.0.0, <=3.4.4)

python-ldap PYPI version =3.0.0, =3.1.2, =3.7.1, =1.0.426, =2.2.1.dev6, =1.5.3, =0.4.4a3, =1.0.0, =0.0.0, =1.1.0, =3.7.0, =1.0.0, =1.1.7, =1.9.1 and more Source cves: CVE-2025-61912 Source advisory: OSV:GHSA-P34H-WQ7J-H5V6...

anomalydetection (0.0.0.dev1), ckanext-ldap (>=3.1.2, <=4.1.3) +28 more potentially affected by CVE-2025-61912 via python-ldap (>=2.4.19, <=3.4.4)

python-ldap PYPI version =2.4.19, =3.1.2, =3.7.1, =1.0.426, =2.2.1.dev6, =0.0.2, =1.5.3, =0.4.4a3, =1.0.0, =0.0.0, =1.1.0, =3.7.0, =3.8.0 and more Source cves: CVE-2025-61912 Source advisory: MEND:CVE-2025-61912...

EUVD-2022-48192

Malicious code in bioql PyPI...

CVE-2022-45292

User invites for Funkwhale v1.2.8 do not permanently expire after being used for signup and can be used again after an account has been deleted...

CVE-2022-45292

User invites for Funkwhale v1.2.8 do not permanently expire after being used for signup and can be used again after an account has been deleted...

Design/Logic Flaw

User invites for Funkwhale v1.2.8 do not permanently expire after being used for signup and can be used again after an account has been deleted...

CVE-2022-45292

User invites for Funkwhale v1.2.8 do not permanently expire after being used for signup and can be used again after an account has been deleted...

CVE-2022-45292

User invites for Funkwhale v1.2.8 do not permanently expire after being used for signup and can be used again after an account has been deleted...

Funkwhale security vulnerabilities

Funkwhale is a federated, free and social music server by Funkwhale, Inc. Designed to help you enjoy music and discover new creators and artists. A security vulnerability exists in Funkwhale v1.2.8 that stems from the fact that user invitations do not expire permanently after being used for...

CVE-2022-45292

User invites for Funkwhale v1.2.8 do not permanently expire after being used for signup and can be used again after an account has been deleted...

CVE-2022-45292: Operation on a Resource after Expiration or Release

User invites for Funkwhale v1.2.8 do not permanently expire after being used for signup and can be used again after an account has been deleted...

PT-2022-27460 · Funkwhale · Funkwhale

Name of the Vulnerable Software and Affected Versions: Funkwhale version 1.2.8 Description: The issue concerns user invites that do not permanently expire after being used for signup. These invites can be used again even after an account associated with the invite has been deleted. Recommendation...

CVE-2022-45292

CVE-2022-45292 affects Funkwhale v1.2.8. The vulnerability is that user invites do not permanently expire after signup and invites can be reused after the associated account is deleted, enabling potential reuse of invitations and account abuse. The connected PT-2022-27460 entry provides the affec...