django-crunch (0.1.12), djangocms-dag-jetcode (>=1.0.0, <=1.3.1) potentially affected by CVE-2024-11406 via djangocms-attributes-field (2.1.0)

djangocms-attributes-field PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on djangocms-attributes-field and may be impacted: - django-crunch 0.1.12 - djangocms-dag-jetcode =1.0.0, =1.3.1 Source cves: CVE-2024-11406 Source advisory:...

taccsite-cms (3.6.0a0) potentially affected by CVE-2024-11406 via djangocms-attributes-field (2.0.0)

djangocms-attributes-field PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on djangocms-attributes-field and may be impacted: - taccsite-cms 3.6.0a0 Source cves: CVE-2024-11406 Source advisory: OSV:PYSEC-2026-1303...

django-cms-qe (>=3.6.2, <=3.7.2), djangocms-aldryn-forms (>=7.0.4, <=7.9.0) +2 more potentially affected by CVE-2024-11406 via djangocms-attributes-field (3.0.0)

djangocms-attributes-field PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on djangocms-attributes-field and may be impacted: - django-cms-qe =3.6.2, =7.0.4, =1.0.0, =2.0.0, =3.0.1 Source cves: CVE-2024-11406 Source advisory:...

richie (>=1.0.0b0, <=1.0.0b3) potentially affected by CVE-2024-11406 via djangocms-attributes-field (1.0.0)

djangocms-attributes-field PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on djangocms-attributes-field and may be impacted: - richie =1.0.0b0, =1.0.0b3 Source cves: CVE-2024-11406 Source advisory: OSV:PYSEC-2026-1303...

django-cms-qe (>=1.4.3, <=2.2.0), django-danceschool (>=0.6.2, <=0.8.3) +1 more potentially affected by CVE-2024-11406 via djangocms-attributes-field (1.2.0)

djangocms-attributes-field PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on djangocms-attributes-field and may be impacted: - django-cms-qe =1.4.3, =0.6.2, =2.28.1, =2.39.2 Source cves: CVE-2024-11406 Source advisory: OSV:PYSEC-2026-1...

richie (0.1.0) potentially affected by CVE-2024-11406 via djangocms-attributes-field (0.3.0)

djangocms-attributes-field PYPI version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on djangocms-attributes-field and may be impacted: - richie 0.1.0 Source cves: CVE-2024-11406 Source advisory: OSV:PYSEC-2026-1303...

Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-010872)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010872 advisory. In the Linux kernel, the following vulnerability has been resolved: bfs: Reconstruct file type when loading from disk syzbot is reporting that SIFMT bits of...

CVE-2026-2509: Improper Neutralization of Input During Web Page Generation

The Page Builder: Pagelayer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Button widget's Custom Attributes field in all versions up to, and including, 2.0.8. This is due to an incomplete event handler blocklist in the 'pagelayerxsscontent' XSS filtering function, whic...

EUVD-2025-203747

In the Linux kernel, the following vulnerability has been resolved: bfs: Reconstruct file type when loading from disk syzbot is reporting that SIFMT bits of inode-imode can become bogus when the SIFMT bits of the 32bits "mode" field loaded from disk are corrupted or when the 32bits "attributes"...

CVE-2025-68266

In the Linux kernel, the following vulnerability has been resolved: bfs: Reconstruct file type when loading from disk syzbot is reporting that SIFMT bits of inode-imode can become bogus when the SIFMT bits of the 32bits "mode" field loaded from disk are corrupted or when the 32bits "attributes"...

UBUNTU-CVE-2025-68266

In the Linux kernel, the following vulnerability has been resolved: bfs: Reconstruct file type when loading from disk syzbot is reporting that SIFMT bits of inode-imode can become bogus when the SIFMT bits of the 32bits "mode" field loaded from disk are corrupted or when the 32bits "attributes"...

CVE-2025-68266

In the Linux kernel, the following vulnerability has been resolved: bfs: Reconstruct file type when loading from disk syzbot is reporting that SIFMT bits of inode-imode can become bogus when the SIFMT bits of the 32bits "mode" field loaded from disk are corrupted or when the 32bits "attributes"...

CVE-2025-68266 bfs: Reconstruct file type when loading from disk

In the Linux kernel, the following vulnerability has been resolved: bfs: Reconstruct file type when loading from disk syzbot is reporting that SIFMT bits of inode-imode can become bogus when the SIFMT bits of the 32bits "mode" field loaded from disk are corrupted or when the 32bits "attributes"...

CVE-2025-68266

In the Linux kernel, the following vulnerability has been resolved: bfs: Reconstruct file type when loading from disk syzbot is reporting that SIFMT bits of inode-imode can become bogus when the SIFMT bits of the 32bits "mode" field loaded from disk are corrupted or when the 32bits "attributes"...

Cross-site Scripting (XSS)

Overview djangocms-attributes-field is an Adds attributes to Django models. Affected versions of this package are vulnerable to Cross-site Scripting XSS due to improper sanitization of form Attributes fields in the Django CMS admin panel. An attacker can exploit this vulnerability through the...

richie (0.1.0) potentially affected by CVE-2024-11406 via djangocms-attributes-field (0.3.0)

djangocms-attributes-field PYPI version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on djangocms-attributes-field and may be impacted: - richie 0.1.0 Source cves: CVE-2024-11406 Source advisory: OSV:GHSA-VXCV-4XVF-PC22...

richie (>=1.0.0b0, <=1.0.0b3) potentially affected by CVE-2024-11406 via djangocms-attributes-field (1.0.0)

djangocms-attributes-field PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on djangocms-attributes-field and may be impacted: - richie =1.0.0b0, =1.0.0b3 Source cves: CVE-2024-11406 Source advisory: OSV:GHSA-VXCV-4XVF-PC22...

django-cms-qe (>=3.6.2, <=3.7.2), djangocms-aldryn-forms (>=7.0.4, <=7.9.0) +2 more potentially affected by CVE-2024-11406 via djangocms-attributes-field (3.0.0)

djangocms-attributes-field PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on djangocms-attributes-field and may be impacted: - django-cms-qe =3.6.2, =7.0.4, =1.0.0, =2.0.0, =3.0.1 Source cves: CVE-2024-11406 Source advisory:...

taccsite-cms (3.6.0a0) potentially affected by CVE-2024-11406 via djangocms-attributes-field (2.0.0)

djangocms-attributes-field PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on djangocms-attributes-field and may be impacted: - taccsite-cms 3.6.0a0 Source cves: CVE-2024-11406 Source advisory: OSV:GHSA-VXCV-4XVF-PC22...

django-cms-qe (>=1.4.3, <=2.2.0), django-danceschool (>=0.6.2, <=0.8.3) +1 more potentially affected by CVE-2024-11406 via djangocms-attributes-field (1.2.0)

djangocms-attributes-field PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on djangocms-attributes-field and may be impacted: - django-cms-qe =1.4.3, =0.6.2, =2.28.1, =2.39.2 Source cves: CVE-2024-11406 Source advisory:...