openslides (2.2.0), openslides-presenter (2.0.3) +2 more potentially affected by CVE-2026-59890 via setuptools (38.7.0)

setuptools PYPI version 38.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - openslides 2.2.0 - openslides-presenter 2.0.3 - openslides-protocol 1.0.0 - openslides-saml 1.0.0 Source cves: CVE-2026-59890 Source...

openslides (>=2.1.0b3, <=2.1.1), openslides-votecollector (>=2.0.1, <=2.0.2) potentially affected by CVE-2026-59890 via setuptools (34.4.1)

setuptools PYPI version 34.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - openslides =2.1.0b3, =2.0.1, =2.0.2 Source cves: CVE-2026-59890 Source advisory: OSV:GHSA-H35F-9H28-MQ5C...

openslides (>=2.3.0b1, <=2.3.0), pex (>=1.4.6, <=1.5.3) +4 more potentially affected by CVE-2026-59890 via setuptools (40.9.0)

setuptools PYPI version 40.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - openslides =2.3.0b1, =1.4.6, =0.2.0, =0.2.2, =0.1.0, =0.2.3 Source cves: CVE-2026-59890 Source advisory: OSV:GHSA-H35F-9H28-MQ5C...

openslides (>=2.1.0b3, <=2.1.1), openslides-votecollector (>=2.0.1, <=2.0.2) potentially affected by CVE-2026-59890 via setuptools (34.4.1)

setuptools PYPI version 34.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - openslides =2.1.0b3, =2.0.1, =2.0.2 Source cves: CVE-2026-59890 Source advisory: OSV:PYSEC-2026-3447...

openslides (>=2.3.0b1, <=2.3.0), pex (>=1.4.6, <=1.5.3) +4 more potentially affected by CVE-2026-59890 via setuptools (40.9.0)

setuptools PYPI version 40.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - openslides =2.3.0b1, =1.4.6, =0.2.0, =0.2.2, =0.1.0, =0.2.3 Source cves: CVE-2026-59890 Source advisory: OSV:PYSEC-2026-3447...

openslides (2.2.0), openslides-presenter (2.0.3) +2 more potentially affected by CVE-2026-59890 via setuptools (38.7.0)

setuptools PYPI version 38.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - openslides 2.2.0 - openslides-presenter 2.0.3 - openslides-protocol 1.0.0 - openslides-saml 1.0.0 Source cves: CVE-2026-59890 Source...

openslides (2.2.0), openslides-presenter (2.0.3) +2 more potentially affected by CVE-2024-6345 via setuptools (38.7.0)

setuptools PYPI version 38.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - openslides 2.2.0 - openslides-presenter 2.0.3 - openslides-protocol 1.0.0 - openslides-saml 1.0.0 Source cves: CVE-2024-6345 Source advisor...

openslides (>=2.1.0b3, <=2.1.1), openslides-votecollector (>=2.0.1, <=2.0.2) potentially affected by CVE-2024-6345 via setuptools (34.4.1)

setuptools PYPI version 34.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - openslides =2.1.0b3, =2.0.1, =2.0.2 Source cves: CVE-2024-6345 Source advisory: OSV:PYSEC-2026-1918...

django-crispy-contact-form (>=0.3.6, <=0.3.8), multidocs (0.1.1) +9 more potentially affected by unknown CVE via bleach (2.1.4)

bleach PYPI version 2.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on bleach and may be impacted: - django-crispy-contact-form =0.3.6, =2.2.0, =2.0.0, =0.5.0a2.post1, =0.4.0a5, =0.5.0 Source cves: unknown CVE Source advisory: OSV:GHSA-GJ48-438W-JH9...

django-crispy-contact-form (>=0.3.6, <=0.3.8), multidocs (0.1.1) +9 more potentially affected by unknown CVE via bleach (2.1.4)

bleach PYPI version 2.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on bleach and may be impacted: - django-crispy-contact-form =0.3.6, =2.2.0, =2.0.0, =0.5.0a2.post1, =0.4.0a5, =0.5.0 Source cves: unknown CVE Source advisory: OSV:GHSA-8RFP-98V4-MMR...

CVE-2026-25519

OpenSlides is a free, web based presentation and assembly system for managing and projecting agenda, motions and elections of an assembly. Prior to version 4.2.29, OpenSlides supports local logins with username and password or an optionally configurable single sign on with SAML via an external ID...

CVE-2026-25519 OpenSlides has incorrect access control vulnerability in authentication service

OpenSlides is a free, web based presentation and assembly system for managing and projecting agenda, motions and elections of an assembly. Prior to version 4.2.29, OpenSlides supports local logins with username and password or an optionally configurable single sign on with SAML via an external ID...

CVE-2026-25519

OpenSlides prior to version 4.2.29 contains an authentication access-control flaw in the login flow for users synced via external IDPs (SAML). The issue allows a local login using a SAML username paired with a trivial password, effectively granting access to all SAML-linked accounts. The root cau...

CVE-2026-25519

OpenSlides is a free, web based presentation and assembly system for managing and projecting agenda, motions and elections of an assembly. Prior to version 4.2.29, OpenSlides supports local logins with username and password or an optionally configurable single sign on with SAML via an external ID...

CVE-2026-25519

OpenSlides is a free, web based presentation and assembly system for managing and projecting agenda, motions and elections of an assembly. Prior to version 4.2.29, OpenSlides supports local logins with username and password or an optionally configurable single sign on with SAML via an external ID...

CVE-2026-25519 OpenSlides has incorrect access control vulnerability in authentication service

OpenSlides is a free, web based presentation and assembly system for managing and projecting agenda, motions and elections of an assembly. Prior to version 4.2.29, OpenSlides supports local logins with username and password or an optionally configurable single sign on with SAML via an external ID...

EUVD-2026-5342

OpenSlides is a free, web based presentation and assembly system for managing and projecting agenda, motions and elections of an assembly. Prior to version 4.2.29, OpenSlides supports local logins with username and password or an optionally configurable single sign on with SAML via an external ID...

OpenSlides Access Control Vulnerability

OpenSlides is an open-source, free web-based system for presentations and meetings. It is used to manage meeting agendas, motions, and votes. Versions of OpenSlides prior to 4.2.29 had a security vulnerability related to access control. This vulnerability stemmed from improper access control duri...

PT-2026-6309

Name of the Vulnerable Software and Affected Versions OpenSlides versions prior to 4.2.29 Description OpenSlides is a web-based presentation and assembly system. Prior to version 4.2.29, a flaw exists in access control for users synchronized via an external IDP, allowing local logins with a trivi...

CVE-2026-25519: Improper Access Control

OpenSlides is a free, web based presentation and assembly system for managing and projecting agenda, motions and elections of an assembly. Prior to version 4.2.29, OpenSlides supports local logins with username and password or an optionally configurable single sign on with SAML via an external ID...