aimmo (>=0.57.1b6141, <=0.61.8b52), cfl-common (>=4.0.0, <=4.14.2) +2 more potentially affected by CVE-2020-15105 via django-two-factor-auth (>=1.5.0, <=1.9.1)

django-two-factor-auth PYPI version =1.5.0, =0.57.1b6141, =4.0.0, =1.1.1, =2.4.0, =2.4.12 Source cves: CVE-2020-15105 Source advisory: GHSA-VHR6-PVJM-9QWF...

2xh-leet (0.1.2), actfw-core (>=2.0.0a0, <=2.1.1) +92 more potentially affected by CVE-2020-10177 via pillow (5.4.1)

pillow PYPI version 5.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - 2xh-leet 0.1.2 - actfw-core =2.0.0a0, =0.1.0a7, =0.1.1, =2.0.0a0, =0.57.1b6141, =2.0.1, =0.4.0, =0.4.0, =0.0.2, =4.3.0, =2.17.0, =0.5.0, =2.0.0,...