unicef-hope-aurora (>=1.7.0.dev639 <=1.7.0rc1) potentially affected by CVE-2025-13030 via django-mdeditor (=0.1.20)

django-mdeditor PYPI version =0.1.20 is affected by a known vulnerability. The following packages have a transitive dependency on django-mdeditor and may be impacted: - unicef-hope-aurora =1.7.0.dev639, =1.7.0rc1 Source cves: CVE-2025-13030 Source advisory: SNYK:PYTHON-DJANGOMDEDITOR-8630926...

Double free in http

An issue was discovered in the http crate before 0.1.20 for Rust. The HeaderMap::Drain API can use a raw pointer, defeating soundness...