argus-server (>=1.0.0, <=1.1.1), b9gemyaeix (>=4.14.0, <=4.14.1) +30 more potentially affected by CVE-2024-32879 via social-auth-app-django (>=5.0.0, <=5.4.0)

social-auth-app-django PYPI version =5.0.0, =1.0.0, =4.14.0, =1.0.0, =0.0.2, =1.0.0, =1.0.0, =1.0.0rc1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =3.5.0rc4, =3.10.0rc29 and more Source cves: CVE-2024-32879 Source advisory: OSV:PYSEC-2026-1931...

django-globus-portal-framework (>=0.3.23, <=0.4.2), django-user-app (0.0.6) +14 more potentially affected by CVE-2024-32879 via social-auth-app-django (4.0.0)

social-auth-app-django PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-app-django and may be impacted: - django-globus-portal-framework =0.3.23, =2.28.1, =1.3.0, =1.0.0b3, =1.6.0, =0.9.2.dev0, =0.9.0, =0.1.0, =6.0.0,...

PYSEC-2026-1931 social-auth-app-django affected by Improper Handling of Case Sensitivity

Impact Due to default case-insensitive collation in MySQL or MariaDB databases, third-party authentication user IDs are not case-sensitive and could cause different IDs to match. Patches This issue has been addressed by https://github.com/python-social-auth/social-app-django/pull/566 and fix...

pixelcms-server (>=0.4.1, <=0.4.2), rest-social-auth (>=1.0.0, <=1.1.0) potentially affected by CVE-2024-32879 via social-auth-app-django (0.1.0)

social-auth-app-django PYPI version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-app-django and may be impacted: - pixelcms-server =0.4.1, =1.0.0, =1.1.0 Source cves: CVE-2024-32879 Source advisory: OSV:PYSEC-2026-1931...

jhub-shibboleth-auth (1.3.0) potentially affected by CVE-2024-28233 via jupyterhub (0.9.2)

jupyterhub PYPI version 0.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - jhub-shibboleth-auth 1.3.0 Source cves: CVE-2024-28233 Source advisory: OSV:PYSEC-2026-1480...

jhub-shibboleth-auth (1.0.0) potentially affected by CVE-2024-28233 via jupyterhub (0.8.1)

jupyterhub PYPI version 0.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - jhub-shibboleth-auth 1.0.0 Source cves: CVE-2024-28233 Source advisory: OSV:PYSEC-2026-1480...

jhub-shibboleth-auth (1.4.0) potentially affected by CVE-2024-28233 via jupyterhub (0.9.4)

jupyterhub PYPI version 0.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - jhub-shibboleth-auth 1.4.0 Source cves: CVE-2024-28233 Source advisory: OSV:PYSEC-2026-1480...

jhub-shibboleth-auth (1.5.0), jupyterhub-ltiauthenticator (>=0.1.0, <=0.2.0) +1 more potentially affected by CVE-2024-28233 via jupyterhub (0.9.6)

jupyterhub PYPI version 0.9.6 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - jhub-shibboleth-auth 1.5.0 - jupyterhub-ltiauthenticator =0.1.0, =0.0.2, =0.0.9 Source cves: CVE-2024-28233 Source advisory:...

jhub-shibboleth-auth (1.2.0) potentially affected by CVE-2024-28233 via jupyterhub (0.9.1)

jupyterhub PYPI version 0.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - jhub-shibboleth-auth 1.2.0 Source cves: CVE-2024-28233 Source advisory: OSV:PYSEC-2026-1480...

jhub-shibboleth-auth (1.1.0) potentially affected by CVE-2024-28233 via jupyterhub (0.9.0)

jupyterhub PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - jhub-shibboleth-auth 1.1.0 Source cves: CVE-2024-28233 Source advisory: OSV:PYSEC-2026-1480...

atlassian-jwt-auth (1.0.9) potentially affected by CVE-2023-50782 via cryptography (0.9.1)

cryptography PYPI version 0.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - atlassian-jwt-auth 1.0.9 Source cves: CVE-2023-50782 Source advisory: OSV:PYSEC-2026-1283...

aiohttp-ext-auth (>=0.1.1, <=0.1.2), ais-dom (>=0.76.5, <=0.87.3) +41 more potentially affected by CVE-2023-50782 via cryptography (2.3.1)

cryptography PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - aiohttp-ext-auth =0.1.1, =0.76.5, =4.0.2, =0.1.0, =0.1.0, =0.1.0, =0.5.0, =1.1.7, =0.8.0, =0.8.1 and more Source cves: CVE-2023-50782...

atlassian-jwt-auth (3.1.0), igitt (>=0.4.1.dev20171005105713, <=0.4.1.dev20171202111001) +4 more potentially affected by CVE-2023-50782 via cryptography (2.0.3)

cryptography PYPI version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - atlassian-jwt-auth 3.1.0 - igitt =0.4.1.dev20171005105713, =0.3.2, =0.1.4, =1.4.5, =1.4.9 Source cves: CVE-2023-50782 Source advisory:...

atlassian-jwt-auth (2.1.1), pyupdater (1.1.8) potentially affected by CVE-2023-50782 via cryptography (1.1.1)

cryptography PYPI version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - atlassian-jwt-auth 2.1.1 - pyupdater 1.1.8 Source cves: CVE-2023-50782 Source advisory: OSV:PYSEC-2026-1283...

atlassian-jwt-auth (>=2.5.1, <=2.8.0), data-pipeline (>=0.9.5, <=0.9.12) potentially affected by CVE-2023-50782 via cryptography (1.3.4)

cryptography PYPI version 1.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - atlassian-jwt-auth =2.5.1, =0.9.5, =0.9.12 Source cves: CVE-2023-50782 Source advisory: OSV:PYSEC-2026-1283...

atlassian-jwt-auth (>=2.2.0, <=2.4.0) potentially affected by CVE-2023-50782 via cryptography (1.2.1)

cryptography PYPI version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - atlassian-jwt-auth =2.2.0, =2.4.0 Source cves: CVE-2023-50782 Source advisory: OSV:PYSEC-2026-1283...

atlassian-jwt-auth (2.5.0), netlib (0.16.0) +1 more potentially affected by CVE-2023-50782 via cryptography (1.2.3)

cryptography PYPI version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - atlassian-jwt-auth 2.5.0 - netlib 0.16.0 - signxml =0.5.0, =1.0.0 Source cves: CVE-2023-50782 Source advisory: OSV:PYSEC-2026-1283...

atlassian-jwt-auth (>=2.8.1, <=2.10.0), fallixy (0.18.1) +3 more potentially affected by CVE-2023-50782 via cryptography (1.5.3)

cryptography PYPI version 1.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - atlassian-jwt-auth =2.8.1, =0.18.1, =0.9.0, =1.1.0 - teamvault 0.6.0 Source cves: CVE-2023-50782 Source advisory: OSV:PYSEC-2026-1283...

atlassian-jwt-auth (1.0.9) potentially affected by CVE-2024-0727 via cryptography (0.9.1)

cryptography PYPI version 0.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - atlassian-jwt-auth 1.0.9 Source cves: CVE-2024-0727 Source advisory: OSV:PYSEC-2026-1285...

atlassian-jwt-auth (>=2.0.0, <=2.1.0), pyjwe (0.1.4) +3 more potentially affected by CVE-2024-0727 via cryptography (1.0.2)

cryptography PYPI version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - atlassian-jwt-auth =2.0.0, =1.0.1, =0.4.5, =0.5.0, =0.5.1 Source cves: CVE-2024-0727 Source advisory: OSV:PYSEC-2026-1285...