badger-proxy (0.1.9), kerberos-auth-proxy (>=0.1.0a3, <=0.1.0a8) +5 more potentially affected by CVE-2025-23217 via mitmproxy (8.1.1)

mitmproxy PYPI version 8.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - badger-proxy 0.1.9 - kerberos-auth-proxy =0.1.0a3, =2.0.1, =0.1.0, =0.4.0, =0.5.0 Source cves: CVE-2025-23217 Source advisory:...

seed-auth-api (>=0.9.0, <=0.9.2), umap-project (>=0.8.0, <=0.8.3) potentially affected by CVE-2024-45231 via django (1.10.5)

django PYPI version 1.10.5 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - seed-auth-api =0.9.0, =0.8.0, =0.8.3 Source cves: CVE-2024-45231 Source advisory: OSV:PYSEC-2026-1297...

Malicious code in @tc-core/auth-service (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7093 Malicious code in @tc-core/auth-service (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7087 Malicious code in @pyme-shared/auth (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @pyme-shared/auth (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7058 Malicious code in @cashback/auth (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @cashback/auth (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7452 Malicious code in cyberday26szymon-auth (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in cyberday26szymon-auth (PyPI)

--- -= Per source details. Do not edit below this line.=-...

django-globus-portal-framework (>=0.3.23, <=0.4.2), django-user-app (0.0.6) +14 more potentially affected by CVE-2024-32879 via social-auth-app-django (4.0.0)

social-auth-app-django PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-app-django and may be impacted: - django-globus-portal-framework =0.3.23, =2.28.1, =1.3.0, =1.0.0b3, =1.6.0, =0.9.2.dev0, =0.9.0, =0.1.0, =6.0.0,...

cnili-authentication (0.0.1), django-rest-social-email-allauth (0.1.0) +5 more potentially affected by CVE-2024-32879 via social-auth-app-django (3.1.0)

social-auth-app-django PYPI version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-app-django and may be impacted: - cnili-authentication 0.0.1 - django-rest-social-email-allauth 0.1.0 - libraryapp =3.0.8, =2.0.0b9, =0.9.6, =1.0.0rc9...

umap-project (0.8.3) potentially affected by CVE-2024-32879 via social-auth-app-django (1.1.0)

social-auth-app-django PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-app-django and may be impacted: - umap-project 0.8.3 Source cves: CVE-2024-32879 Source advisory: OSV:PYSEC-2026-1931...

pixelcms-server (>=0.4.1, <=0.4.2), pixelcms-shop-server (0.0.1) +1 more potentially affected by CVE-2024-32879 via social-auth-app-django (0.1.0)

social-auth-app-django PYPI version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-app-django and may be impacted: - pixelcms-server =0.4.1, =1.0.0, =1.1.0 Source cves: CVE-2024-32879 Source advisory: OSV:PYSEC-2026-1931...

django-auth0-user (>=0.15.0, <=0.16.5), edx-auth-backends (>=3.0.0, <=3.0.2) +4 more potentially affected by CVE-2024-32879 via social-auth-app-django (3.4.0)

social-auth-app-django PYPI version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-app-django and may be impacted: - django-auth0-user =0.15.0, =3.0.0, =0.1.0, =4.4.0a1, =0.2.0, =2.0.0, =5.0.1 Source cves: CVE-2024-32879 Source...

umap-project (>=0.8.0, <=0.8.2) potentially affected by CVE-2024-32879 via social-auth-app-django (1.0.1)

social-auth-app-django PYPI version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-app-django and may be impacted: - umap-project =0.8.0, =0.8.2 Source cves: CVE-2024-32879 Source advisory: OSV:PYSEC-2026-1931...

edx-auth-backends (>=1.0.1, <=2.0.2), rest-social-auth (1.2.0) potentially affected by CVE-2024-32879 via social-auth-app-django (1.2.0)

social-auth-app-django PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-app-django and may be impacted: - edx-auth-backends =1.0.1, =2.0.2 - rest-social-auth 1.2.0 Source cves: CVE-2024-32879 Source advisory:...

argus-server (>=1.0.0, <=1.1.1), b9gemyaeix (>=4.14.0, <=4.14.1) +30 more potentially affected by CVE-2024-32879 via social-auth-app-django (>=5.0.0, <=5.4.0)

social-auth-app-django PYPI version =5.0.0, =1.0.0, =4.14.0, =1.0.0, =0.0.2, =1.0.0, =1.0.0, =1.0.0rc1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =3.5.0rc4, =3.10.0rc29 and more Source cves: CVE-2024-32879 Source advisory: OSV:PYSEC-2026-1931...

PYSEC-2026-1931 social-auth-app-django affected by Improper Handling of Case Sensitivity

Impact Due to default case-insensitive collation in MySQL or MariaDB databases, third-party authentication user IDs are not case-sensitive and could cause different IDs to match. Patches This issue has been addressed by https://github.com/python-social-auth/social-app-django/pull/566 and fix...

rest-social-auth (>=1.3.0, <=1.4.0), saltdash (>=0.9.1, <=0.9.5) +1 more potentially affected by CVE-2024-32879 via social-auth-app-django (2.1.0)

social-auth-app-django PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-app-django and may be impacted: - rest-social-auth =1.3.0, =0.9.1, =1.0.0rc1, =1.0.0rc8 Source cves: CVE-2024-32879 Source advisory: OSV:PYSEC-2026-19...