centurion-erp (>=1.28.0rc1, <=1.29.0), galaxy (>=26.0.0, <=26.0.1) +1 more potentially affected by CVE-2026-57175 via social-auth-core (4.8.3)

social-auth-core PYPI version 4.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - centurion-erp =1.28.0rc1, =26.0.0, =3.6.0, =3.6.1 Source cves: CVE-2026-57175 Source advisory: OSV:PYSEC-2026-4167...

agentstack-cli (>=0.6.1rc1, <=0.6.1), asknews (>=0.13.12, <=0.13.34) +14 more potentially affected by CVE-2026-69248 via cryptography (46.0.4)

cryptography PYPI version 46.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - agentstack-cli =0.6.1rc1, =0.13.12, =0.4.1, =2.4.0, =1.2.1, =3.4.6, =1.0.0, =1.0.0, =1.0.9 - yente 5.2.0 and more Source cves:...

agentstack-cli (>=0.6.1rc1, <=0.6.1), asknews (>=0.13.12, <=0.13.34) +14 more potentially affected by CVE-2026-69249 via cryptography (46.0.4)

cryptography PYPI version 46.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - agentstack-cli =0.6.1rc1, =0.13.12, =0.4.1, =2.4.0, =1.2.1, =3.4.6, =1.0.0, =1.0.0, =1.0.9 - yente 5.2.0 and more Source cves:...

EUVD-2024-52176

Malicious code in bioql PyPI...

CVE-2025-58156 Centurion ERP users can view hashed authentication tokens that belong to other users

Centurion ERP is an ERP with a focus on ITSM and automation. In versions starting from 1.12.0 to before 1.21.0, an authenticated user can view all authentication token details within the database. This includes the actual token, although only the hashed token. This does not include any un-hashed...

CVE-2025-58156 Centurion ERP users can view hashed authentication tokens that belong to other users

Centurion ERP is an ERP with a focus on ITSM and automation. In versions starting from 1.12.0 to before 1.21.0, an authenticated user can view all authentication token details within the database. This includes the actual token, although only the hashed token. This does not include any un-hashed...

CVE-2025-58156

Centurion ERP is an ERP with a focus on ITSM and automation. In versions starting from 1.12.0 to before 1.21.0, an authenticated user can view all authentication token details within the database. This includes the actual token, although only the hashed token. This does not include any un-hashed...

CVE-2025-58156: Improper Authorization

Centurion ERP is an ERP with a focus on ITSM and automation. In versions starting from 1.12.0 to before 1.21.0, an authenticated user can view all authentication token details within the database. This includes the actual token, although only the hashed token. This does not include any un-hashed...

CVE-2024-49373

No Fuss Computing Centurion ERP is open source enterprise resource planning ERP software. Prior to version 1.2.1, an authenticated user can view projects within organizations they are not apart of. Version 1.2.1 fixes the problem...

CVE-2024-53855

Centurion ERP Enterprise Rescource Planning is a simple application developed to provide open source IT management with a large emphasis on the IT Service Management ITSM modules. A user who is authenticated and has view permissions for a ticket, can view the tickets of another organization they...

CVE-2024-53855

Centurion ERP Enterprise Rescource Planning is a simple application developed to provide open source IT management with a large emphasis on the IT Service Management ITSM modules. A user who is authenticated and has view permissions for a ticket, can view the tickets of another organization they...

CVE-2024-53855

Centurion ERP prior to 1.3.1 allows an authenticated user with certain ticket-view permissions (view_ticket_change, view_ticket_incident, view_ticket_request, view_ticket_problem) to view tickets belonging to other organizations when using the API endpoints for tickets. The UI and Project Tasks a...

CVE-2024-53855 User can view tickets from organizations they're not apart of in centurion_erp

Centurion ERP Enterprise Rescource Planning is a simple application developed to provide open source IT management with a large emphasis on the IT Service Management ITSM modules. A user who is authenticated and has view permissions for a ticket, can view the tickets of another organization they...

CVE-2024-53855 User can view tickets from organizations they're not apart of in centurion_erp

Centurion ERP Enterprise Rescource Planning is a simple application developed to provide open source IT management with a large emphasis on the IT Service Management ITSM modules. A user who is authenticated and has view permissions for a ticket, can view the tickets of another organization they...

CVE-2024-53855

Centurion ERP Enterprise Rescource Planning is a simple application developed to provide open source IT management with a large emphasis on the IT Service Management ITSM modules. A user who is authenticated and has view permissions for a ticket, can view the tickets of another organization they...

CVE-2024-53855 User can view tickets from organizations they're not apart of in centurion_erp

Centurion ERP Enterprise Rescource Planning is a simple application developed to provide open source IT management with a large emphasis on the IT Service Management ITSM modules. A user who is authenticated and has view permissions for a ticket, can view the tickets of another organization they...

CVE-2024-53855: Improper Isolation or Compartmentalization

Centurion ERP Enterprise Rescource Planning is a simple application developed to provide open source IT management with a large emphasis on the IT Service Management ITSM modules. A user who is authenticated and has view permissions for a ticket, can view the tickets of another organization they...

PT-2024-35952

Name of the Vulnerable Software and Affected Versions: Centurion ERP versions prior to 1.3.1 Description: A user with view permissions for a ticket can view the tickets of another organization they are not a part of, if they have specific permissions such as view ticket change, view ticket...

No Fuss Computing Centurion ERP 安全漏洞

No Fuss Computing Centurion ERP is an open source enterprise resource planning ERP software from No Fuss Computing. A security vulnerability exists in No Fuss Computing Centurion ERP versions prior to 1.3.1, which originated when an authenticated user with work order viewing privileges could view...

CVE-2024-49373

No Fuss Computing Centurion ERP is open source enterprise resource planning ERP software. Prior to version 1.2.1, an authenticated user can view projects within organizations they are not apart of. Version 1.2.1 fixes the problem...