MAL-2026-7058 Malicious code in @cashback/auth (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in cyberday26szymon-auth (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7452 Malicious code in cyberday26szymon-auth (PyPI)

--- -= Per source details. Do not edit below this line.=-...

PYSEC-2026-1931 social-auth-app-django affected by Improper Handling of Case Sensitivity

Impact Due to default case-insensitive collation in MySQL or MariaDB databases, third-party authentication user IDs are not case-sensitive and could cause different IDs to match. Patches This issue has been addressed by https://github.com/python-social-auth/social-app-django/pull/566 and fix...

pixelcms-server (>=0.4.1, <=0.4.2), rest-social-auth (>=1.0.0, <=1.1.0) potentially affected by CVE-2024-32879 via social-auth-app-django (0.1.0)

social-auth-app-django PYPI version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-app-django and may be impacted: - pixelcms-server =0.4.1, =1.0.0, =1.1.0 Source cves: CVE-2024-32879 Source advisory: OSV:PYSEC-2026-1931...

umap-project (>=0.8.0, <=0.8.2) potentially affected by CVE-2024-32879 via social-auth-app-django (1.0.1)

social-auth-app-django PYPI version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-app-django and may be impacted: - umap-project =0.8.0, =0.8.2 Source cves: CVE-2024-32879 Source advisory: OSV:PYSEC-2026-1931...

umap-project (0.8.3) potentially affected by CVE-2024-32879 via social-auth-app-django (1.1.0)

social-auth-app-django PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-app-django and may be impacted: - umap-project 0.8.3 Source cves: CVE-2024-32879 Source advisory: OSV:PYSEC-2026-1931...

edx-auth-backends (>=1.0.1, <=2.0.2), rest-social-auth (1.2.0) potentially affected by CVE-2024-32879 via social-auth-app-django (1.2.0)

social-auth-app-django PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-app-django and may be impacted: - edx-auth-backends =1.0.1, =2.0.2 - rest-social-auth 1.2.0 Source cves: CVE-2024-32879 Source advisory:...

rest-social-auth (>=1.3.0, <=1.4.0), saltdash (>=0.9.1, <=0.9.5) +1 more potentially affected by CVE-2024-32879 via social-auth-app-django (2.1.0)

social-auth-app-django PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-app-django and may be impacted: - rest-social-auth =1.3.0, =0.9.1, =1.0.0rc1, =1.0.0rc8 Source cves: CVE-2024-32879 Source advisory: OSV:PYSEC-2026-19...

cnili-authentication (0.0.1), django-rest-social-email-allauth (0.1.0) +5 more potentially affected by CVE-2024-32879 via social-auth-app-django (3.1.0)

social-auth-app-django PYPI version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-app-django and may be impacted: - cnili-authentication 0.0.1 - django-rest-social-email-allauth 0.1.0 - libraryapp =3.0.8, =2.0.0b9, =0.9.6, =1.0.0rc9...

django-auth0-user (>=0.15.0, <=0.16.5), edx-auth-backends (>=3.0.0, <=3.0.2) +4 more potentially affected by CVE-2024-32879 via social-auth-app-django (3.4.0)

social-auth-app-django PYPI version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-app-django and may be impacted: - django-auth0-user =0.15.0, =3.0.0, =0.1.0, =4.4.0a1, =0.2.0, =2.0.0, =5.0.1 Source cves: CVE-2024-32879 Source...

django-globus-portal-framework (>=0.3.23, <=0.4.2), django-user-app (0.0.6) +14 more potentially affected by CVE-2024-32879 via social-auth-app-django (4.0.0)

social-auth-app-django PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-app-django and may be impacted: - django-globus-portal-framework =0.3.23, =2.28.1, =1.3.0, =1.0.0b3, =1.6.0, =0.9.2.dev0, =0.9.0, =0.1.0, =6.0.0,...

argus-server (>=1.0.0, <=1.1.1), b9gemyaeix (>=4.14.0, <=4.14.1) +30 more potentially affected by CVE-2024-32879 via social-auth-app-django (>=5.0.0, <=5.4.0)

social-auth-app-django PYPI version =5.0.0, =1.0.0, =4.14.0, =1.0.0, =0.0.2, =1.0.0, =1.0.0, =1.0.0rc1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =3.5.0rc4, =3.10.0rc29 and more Source cves: CVE-2024-32879 Source advisory: OSV:PYSEC-2026-1931...

jhub-shibboleth-auth (1.0.0) potentially affected by CVE-2024-28233 via jupyterhub (0.8.1)

jupyterhub PYPI version 0.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - jhub-shibboleth-auth 1.0.0 Source cves: CVE-2024-28233 Source advisory: OSV:PYSEC-2026-1480...

jhub-shibboleth-auth (1.1.0) potentially affected by CVE-2024-28233 via jupyterhub (0.9.0)

jupyterhub PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - jhub-shibboleth-auth 1.1.0 Source cves: CVE-2024-28233 Source advisory: OSV:PYSEC-2026-1480...

jhub-shibboleth-auth (1.2.0) potentially affected by CVE-2024-28233 via jupyterhub (0.9.1)

jupyterhub PYPI version 0.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - jhub-shibboleth-auth 1.2.0 Source cves: CVE-2024-28233 Source advisory: OSV:PYSEC-2026-1480...

jhub-shibboleth-auth (1.3.0) potentially affected by CVE-2024-28233 via jupyterhub (0.9.2)

jupyterhub PYPI version 0.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - jhub-shibboleth-auth 1.3.0 Source cves: CVE-2024-28233 Source advisory: OSV:PYSEC-2026-1480...

jhub-shibboleth-auth (1.4.0) potentially affected by CVE-2024-28233 via jupyterhub (0.9.4)

jupyterhub PYPI version 0.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - jhub-shibboleth-auth 1.4.0 Source cves: CVE-2024-28233 Source advisory: OSV:PYSEC-2026-1480...

jhub-shibboleth-auth (1.5.0), jupyterhub-ltiauthenticator (>=0.1.0, <=0.2.0) +1 more potentially affected by CVE-2024-28233 via jupyterhub (0.9.6)

jupyterhub PYPI version 0.9.6 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - jhub-shibboleth-auth 1.5.0 - jupyterhub-ltiauthenticator =0.1.0, =0.0.2, =0.0.9 Source cves: CVE-2024-28233 Source advisory:...

atlassian-jwt-auth (1.0.9) potentially affected by CVE-2023-50782 via cryptography (0.9.1)

cryptography PYPI version 0.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - atlassian-jwt-auth 1.0.9 Source cves: CVE-2023-50782 Source advisory: OSV:PYSEC-2026-1283...