centurion-erp (>=1.28.0rc1, <=1.29.0), galaxy (>=26.0.0, <=26.0.1) +1 more potentially affected by CVE-2026-57175 via social-auth-core (4.8.3)

social-auth-core PYPI version 4.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - centurion-erp =1.28.0rc1, =26.0.0, =3.6.0, =3.6.1 Source cves: CVE-2026-57175 Source advisory: OSV:PYSEC-2026-4167...

centurion-erp (>=1.28.0rc1, <=1.29.0), galaxy (>=26.0.0, <=26.0.1) +1 more potentially affected by CVE-2026-57179 via social-auth-core (4.8.3)

social-auth-core PYPI version 4.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - centurion-erp =1.28.0rc1, =26.0.0, =3.6.0, =3.6.1 Source cves: CVE-2026-57179 Source advisory: OSV:PYSEC-2026-4168...

centurion-erp (>=1.28.0rc1, <=1.29.0), galaxy (>=26.0.0, <=26.0.1) +1 more potentially affected by CVE-2026-57178 via social-auth-core (4.8.3)

social-auth-core PYPI version 4.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - centurion-erp =1.28.0rc1, =26.0.0, =3.6.0, =3.6.1 Source cves: CVE-2026-57178 Source advisory: OSV:PYSEC-2026-4165...

centurion-erp (>=1.28.0rc1, <=1.29.0), galaxy (>=26.0.0, <=26.0.1) +1 more potentially affected by CVE-2026-57176 via social-auth-core (4.8.3)

social-auth-core PYPI version 4.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - centurion-erp =1.28.0rc1, =26.0.0, =3.6.0, =3.6.1 Source cves: CVE-2026-57176 Source advisory: OSV:PYSEC-2026-4166...

centurion-erp (>=1.28.0rc1, <=1.29.0), galaxy (>=26.0.0, <=26.0.1) +1 more potentially affected by CVE-2026-57179 via social-auth-core (4.8.3)

social-auth-core PYPI version 4.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - centurion-erp =1.28.0rc1, =26.0.0, =3.6.0, =3.6.1 Source cves: CVE-2026-57179 Source advisory: OSV:GHSA-VQG6-3FW6-J9JG...

centurion-erp (>=1.28.0rc1, <=1.29.0), galaxy (>=26.0.0, <=26.0.1) +1 more potentially affected by CVE-2026-57178 via social-auth-core (4.8.3)

social-auth-core PYPI version 4.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - centurion-erp =1.28.0rc1, =26.0.0, =3.6.0, =3.6.1 Source cves: CVE-2026-57178 Source advisory: OSV:GHSA-3C93-F73F-QC9H...

argus-notification-msteams (0.5.1), argus-server (>=1.2.1, <=1.22.1) +78 more potentially affected by CVE-2026-57178 via social-auth-core (4.9.1)

social-auth-core PYPI version 4.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - argus-notification-msteams 0.5.1 - argus-server =1.2.1, =1.30.0, =1.234.0, =0.4.3, =0.8.7, =0.0.2a17, =0.1.0, =1.0.0, =2.2.0a0,...

centurion-erp (>=1.28.0rc1, <=1.29.0), galaxy (>=26.0.0, <=26.0.1) +1 more potentially affected by CVE-2026-57177 via social-auth-core (4.8.3)

social-auth-core PYPI version 4.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - centurion-erp =1.28.0rc1, =26.0.0, =3.6.0, =3.6.1 Source cves: CVE-2026-57177 Source advisory: OSV:GHSA-X7QQ-23VW-7PFG...

centurion-erp (>=1.28.0rc1, <=1.29.0), galaxy (>=26.0.0, <=26.0.1) +1 more potentially affected by CVE-2026-57176 via social-auth-core (4.8.3)

social-auth-core PYPI version 4.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - centurion-erp =1.28.0rc1, =26.0.0, =3.6.0, =3.6.1 Source cves: CVE-2026-57176 Source advisory: OSV:GHSA-FP7W-M676-W7GC...

centurion-erp (>=1.28.0rc1, <=1.29.0), galaxy (>=26.0.0, <=26.0.1) +1 more potentially affected by CVE-2026-57175 via social-auth-core (4.8.3)

social-auth-core PYPI version 4.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - centurion-erp =1.28.0rc1, =26.0.0, =3.6.0, =3.6.1 Source cves: CVE-2026-57175 Source advisory: OSV:GHSA-VQ6G-G6C7-5F2J...

agentstack-cli (>=0.6.1rc1, <=0.6.1), asknews (>=0.13.12, <=0.13.34) +14 more potentially affected by CVE-2026-69248 via cryptography (46.0.4)

cryptography PYPI version 46.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - agentstack-cli =0.6.1rc1, =0.13.12, =0.4.1, =2.4.0, =1.2.1, =3.4.6, =1.0.0, =1.0.0, =1.0.9 - yente 5.2.0 and more Source cves:...

agentstack-cli (>=0.6.1rc1, <=0.6.1), asknews (>=0.13.12, <=0.13.34) +14 more potentially affected by CVE-2026-69249 via cryptography (46.0.4)

cryptography PYPI version 46.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - agentstack-cli =0.6.1rc1, =0.13.12, =0.4.1, =2.4.0, =1.2.1, =3.4.6, =1.0.0, =1.0.0, =1.0.9 - yente 5.2.0 and more Source cves:...

EUVD-2024-52176

Malicious code in bioql PyPI...

CVE-2025-58156 Centurion ERP users can view hashed authentication tokens that belong to other users

Centurion ERP is an ERP with a focus on ITSM and automation. In versions starting from 1.12.0 to before 1.21.0, an authenticated user can view all authentication token details within the database. This includes the actual token, although only the hashed token. This does not include any un-hashed...

CVE-2025-58156

Centurion ERP is an ERP with a focus on ITSM and automation. In versions starting from 1.12.0 to before 1.21.0, an authenticated user can view all authentication token details within the database. This includes the actual token, although only the hashed token. This does not include any un-hashed...

CVE-2025-58156 Centurion ERP users can view hashed authentication tokens that belong to other users

Centurion ERP is an ERP with a focus on ITSM and automation. In versions starting from 1.12.0 to before 1.21.0, an authenticated user can view all authentication token details within the database. This includes the actual token, although only the hashed token. This does not include any un-hashed...

CVE-2025-58156: Improper Authorization

Centurion ERP is an ERP with a focus on ITSM and automation. In versions starting from 1.12.0 to before 1.21.0, an authenticated user can view all authentication token details within the database. This includes the actual token, although only the hashed token. This does not include any un-hashed...

CVE-2024-49373

No Fuss Computing Centurion ERP is open source enterprise resource planning ERP software. Prior to version 1.2.1, an authenticated user can view projects within organizations they are not apart of. Version 1.2.1 fixes the problem...

CVE-2024-53855

Centurion ERP Enterprise Rescource Planning is a simple application developed to provide open source IT management with a large emphasis on the IT Service Management ITSM modules. A user who is authenticated and has view permissions for a ticket, can view the tickets of another organization they...

CVE-2024-53855

Centurion ERP Enterprise Rescource Planning is a simple application developed to provide open source IT management with a large emphasis on the IT Service Management ITSM modules. A user who is authenticated and has view permissions for a ticket, can view the tickets of another organization they...