247 matches found
doccano (>=1.8.2, <=1.8.3), emus-web (0.1.0) +6 more potentially affected by CVE-2026-27982 via django-allauth (0.50.0)
django-allauth PYPI version 0.50.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - doccano =1.8.2, =1.0.0b6, =1.40.0, =1.92.0, =0.1.6, =0.1.0, =0.11.12 Source cves: CVE-2026-27982 Source advisory:...
doccano (>=1.8.2, <=1.8.3), emus-web (0.1.0) +6 more potentially affected by CVE-2026-27982 via django-allauth (0.50.0)
django-allauth PYPI version 0.50.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - doccano =1.8.2, =1.0.0b6, =1.40.0, =1.92.0, =0.1.6, =0.1.0, =0.11.12 Source cves: CVE-2026-27982 Source advisory: OSV:PYSEC-2026-56...
django-yabl (>=0.0.1, <=0.0.3), geonode (3.3.3) potentially affected by CVE-2026-27982 via django-allauth (0.47.0)
django-allauth PYPI version 0.47.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - django-yabl =0.0.1, =0.0.3 - geonode 3.3.3 Source cves: CVE-2026-27982 Source advisory: OSV:PYSEC-2026-56...
geonode (>=4.3.0, <=4.3.1), grooveshop-django-api (>=0.66.0, <=0.108.0) +2 more potentially affected by CVE-2026-27982 via django-allauth (0.61.1)
django-allauth PYPI version 0.61.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - geonode =4.3.0, =0.66.0, =1.62.0, =1.114.0, =1.137.0 Source cves: CVE-2026-27982 Source advisory: OSV:PYSEC-2026-56...
geonode (>=4.0.0, <=4.0.0.post1), jpeglib (0.10.16) potentially affected by CVE-2026-1703 via pip (22.2.1)
pip PYPI version 22.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - geonode =4.0.0, =4.0.0.post1 - jpeglib 0.10.16 Source cves: CVE-2026-1703 Source advisory: OSV:GHSA-6VGW-5PG2-W6JP...
CVE-2023-40017
GeoNode is an open source platform that facilitates the creation, sharing, and collaborative use of geospatial data. In versions 3.2.0 through 4.1.2, the endpoint /proxy/?url= does not properly protect against server-side request forgery. This allows an attacker to port scan internal hosts and...
geonode (>=4.3.0, <=4.3.1), grooveshop-django-api (>=0.66.0, <=0.108.0) +2 more potentially affected by CVE-2025-65430 via django-allauth (0.61.1)
django-allauth PYPI version 0.61.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - geonode =4.3.0, =0.66.0, =1.62.0, =1.114.0, =1.137.0 Source cves: CVE-2025-65430 Source advisory: OSV:GHSA-QHMC-3MVR-F2J4...
doccano (>=1.8.2, <=1.8.3), emus-web (0.1.0) +6 more potentially affected by CVE-2025-65430 via django-allauth (0.50.0)
django-allauth PYPI version 0.50.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - doccano =1.8.2, =1.0.0b6, =1.40.0, =1.92.0, =0.1.6, =0.1.0, =0.11.12 Source cves: CVE-2025-65430 Source advisory:...
doccano (>=1.8.2, <=1.8.3), emus-web (0.1.0) +6 more potentially affected by CVE-2025-65431 via django-allauth (0.50.0)
django-allauth PYPI version 0.50.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - doccano =1.8.2, =1.0.0b6, =1.40.0, =1.92.0, =0.1.6, =0.1.0, =0.11.12 Source cves: CVE-2025-65431 Source advisory:...
geonode (>=4.3.0, <=4.3.1), grooveshop-django-api (>=0.66.0, <=0.108.0) +2 more potentially affected by CVE-2025-65431 via django-allauth (0.61.1)
django-allauth PYPI version 0.61.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - geonode =4.3.0, =0.66.0, =1.62.0, =1.114.0, =1.137.0 Source cves: CVE-2025-65431 Source advisory: OSV:GHSA-8M3C-C723-H4P4...
django-yabl (>=0.0.1, <=0.0.3), geonode (3.3.3) potentially affected by CVE-2025-65431 via django-allauth (0.47.0)
django-allauth PYPI version 0.47.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - django-yabl =0.0.1, =0.0.3 - geonode 3.3.3 Source cves: CVE-2025-65431 Source advisory: OSV:GHSA-8M3C-C723-H4P4...
django-yabl (>=0.0.1, <=0.0.3), geonode (3.3.3) potentially affected by CVE-2025-65430 via django-allauth (0.47.0)
django-allauth PYPI version 0.47.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - django-yabl =0.0.1, =0.0.3 - geonode 3.3.3 Source cves: CVE-2025-65430 Source advisory: OSV:GHSA-QHMC-3MVR-F2J4...
django-yabl (>=0.0.1, <=0.0.3), geonode (3.3.3) potentially affected by CVE-2025-65430 via django-allauth (0.47.0)
django-allauth PYPI version 0.47.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - django-yabl =0.0.1, =0.0.3 - geonode 3.3.3 Source cves: CVE-2025-65430 Source advisory: OSV:PYSEC-2025-110...
django-yabl (>=0.0.1, <=0.0.3), geonode (3.3.3) potentially affected by CVE-2025-65431 via django-allauth (0.47.0)
django-allauth PYPI version 0.47.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - django-yabl =0.0.1, =0.0.3 - geonode 3.3.3 Source cves: CVE-2025-65431 Source advisory: OSV:PYSEC-2025-111...
geonode (>=4.3.0, <=4.3.1), grooveshop-django-api (>=0.66.0, <=0.108.0) +2 more potentially affected by CVE-2025-65431 via django-allauth (0.61.1)
django-allauth PYPI version 0.61.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - geonode =4.3.0, =0.66.0, =1.62.0, =1.114.0, =1.137.0 Source cves: CVE-2025-65431 Source advisory: OSV:PYSEC-2025-111...
geonode (>=4.3.0, <=4.3.1), grooveshop-django-api (>=0.66.0, <=0.108.0) +2 more potentially affected by CVE-2025-65430 via django-allauth (0.61.1)
django-allauth PYPI version 0.61.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - geonode =4.3.0, =0.66.0, =1.62.0, =1.114.0, =1.137.0 Source cves: CVE-2025-65430 Source advisory: OSV:PYSEC-2025-110...
EUVD-2023-32130
Malicious code in bioql PyPI...
EUVD-2023-0082
Malicious code in bioql PyPI...
EUVD-2023-0081
Malicious code in bioql PyPI...
geonode (>=4.0.0, <=4.0.0.post1), jpeglib (0.10.16) potentially affected by CVE-2025-8869 via pip (22.2.1)
pip PYPI version 22.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - geonode =4.0.0, =4.0.0.post1 - jpeglib 0.10.16 Source cves: CVE-2025-8869 Source advisory: OSV:GHSA-4XH5-X5GV-QWPH...