coderedcms (>=0.5.0, <=0.7.1), coop (>=2.1.0b0, <=2.1.4) +3 more potentially affected by CVE-2026-28222 via wagtail (2.1.3)

wagtail PYPI version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - coderedcms =0.5.0, =2.1.0b0, =0.5.0, =0.0.2, =0.0.5 Source cves: CVE-2026-28222 Source advisory: OSV:GHSA-P5CM-246W-84JM...

coderedcms (>=0.11.0, <=0.14.1), coop (>=2.0.0, <=2.4.5) +4 more potentially affected by CVE-2026-28222 via wagtail (2.4.0)

wagtail PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - coderedcms =0.11.0, =2.0.0, =4.0.3, =0.6.0, =0.1.0.dev8, =0.7.0, =0.16.4 Source cves: CVE-2026-28222 Source advisory: OSV:GHSA-P5CM-246W-84JM...

coderedcms (>=0.18.0, <=0.18.2), coop (>=2.8.0, <=2.8.2) +10 more potentially affected by CVE-2026-28222 via wagtail (2.8.2)

wagtail PYPI version 2.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - coderedcms =0.18.0, =2.8.0, =0.0.5, =4.1.0, =0.5.0, =1.0.0, =0.22.0, =3.8.0, =3.9.0 Source cves: CVE-2026-28222 Source advisory:...

11x-wagtail-blog (>=0.0.0, <=0.2.0), anyvec (0.1.3) +61 more potentially affected by CVE-2026-28231 via pillow-heif (0.22.0)

pillow-heif PYPI version 0.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow-heif and may be impacted: - 11x-wagtail-blog =0.0.0, =3.0.0, =5.2.0, =1.0.0, =2.0.0, =2.30.0, =0.1.0a1, =1.0.0.dev0, =0.4.0a0, =4.0.0, =0.7.0, =0.7.2 and more Source...

coderedcms (>=0.11.0, <=0.14.1), coop (>=2.0.0, <=2.4.5) +4 more potentially affected by CVE-2026-25517 via wagtail (2.4.0)

wagtail PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - coderedcms =0.11.0, =2.0.0, =4.0.3, =0.6.0, =0.1.0.dev8, =0.7.0, =0.16.4 Source cves: CVE-2026-25517 Source advisory: OSV:GHSA-4QVV-G3VR-M348...

aimmo (>=0.61.9b59, <=1.3.1), cfl-common (>=4.15.0, <=5.26.7) +19 more potentially affected by CVE-2026-25517 via wagtail (2.11.9)

wagtail PYPI version 2.11.9 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - aimmo =0.61.9b59, =4.15.0, =4.15.0, =2.11.0, =0.2.10, =2.5.1, =0.1.0, =3.0.0, =0.9.0, =0.9.0, =0.9.4 and more Source cves: CVE-2026-25517 Source...

coderedcms (>=0.19.0rc1, <=0.19.1), coop (>=2.9.0, <=2.9.3) +14 more potentially affected by CVE-2026-25517 via wagtail (2.9.3)

wagtail PYPI version 2.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - coderedcms =0.19.0rc1, =2.9.0, =2.5.3, =0.1.0, =0.22.3, =0.1.0, =0.4.0 - wagtailmodelchooser 0.3.0 - wagtailperson 0.11.0 - wagtailpress 0.10.0 an...

coderedcms (>=0.5.0, <=0.7.1), coop (>=2.1.0b0, <=2.1.4) +3 more potentially affected by CVE-2026-25517 via wagtail (2.1.3)

wagtail PYPI version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - coderedcms =0.5.0, =2.1.0b0, =0.5.0, =0.0.2, =0.0.5 Source cves: CVE-2026-25517 Source advisory: OSV:GHSA-4QVV-G3VR-M348...

cloudxns-ddns-service (1.0.0), coderedcms (>=0.10.0, <=0.14.1) +84 more potentially affected by CVE-2025-48432 via django (2.1.15)

django PYPI version 2.1.15 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - cloudxns-ddns-service 1.0.0 - coderedcms =0.10.0, =2.4.0, =0.3.1, =0.1.6, =0.2.0, =1.3.2, =1.3.3 - django-basicauth 0.5.1 - django-brunch 1.0.3 -...

2xh-leet (0.1.2), actfw-core (>=2.0.0a0, <=2.1.1) +92 more potentially affected by CVE-2023-44271 via pillow (5.4.1)

pillow PYPI version 5.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - 2xh-leet 0.1.2 - actfw-core =2.0.0a0, =0.1.0a7, =0.1.1, =2.0.0a0, =0.57.1b6141, =2.0.1, =0.4.0, =0.4.0, =0.0.2, =4.3.0, =2.17.0, =0.5.0, =2.0.0,...

CVE-2021-46897

CVE-2021-46897 affects Wagtail CRX CodeRed Extensions (formerly CodeRed CMS/coderedcms) prior to 0.22.3. The vulnerability is a path traversal flaw in views.py that allows upward traversal (..%2f..%2f) when serving protected media, as documented across multiple sources (GitHub issues/PRs and vend...

coderedcms (>=0.11.0, <=0.14.1), coop (>=2.0.0, <=2.4.5) +4 more potentially affected by CVE-2023-45809 via wagtail (2.4.0)

wagtail PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - coderedcms =0.11.0, =2.0.0, =4.0.3, =0.6.0, =0.1.0.dev8, =0.7.0, =0.16.4 Source cves: CVE-2023-45809 Source advisory: OSV:PYSEC-2023-219...

coderedcms (>=0.16.0, <=0.16.3), coop (>=2.6.0, <=2.6.5) +12 more potentially affected by CVE-2023-45809 via wagtail (2.6.3)

wagtail PYPI version 2.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - coderedcms =0.16.0, =2.6.0, =8.12.6, =10.0.0, =8.0.0, =8.0.0, =0.1.4, =2.0.3, =0.9.1, =0.9.4 Source cves: CVE-2023-45809 Source advisory:...

coderedcms (0.17.0), coop (2.7.0) +10 more potentially affected by CVE-2023-45809 via wagtail (2.7.4)

wagtail PYPI version 2.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - coderedcms 0.17.0 - coop 2.7.0 - meine-stadt-transparent 0.2.4 - texsite 2.0.0 - wagtail-copyablemodeladmin 1.0.0 - wagtail-grapple =0.4.9, =0.3.2...

coderedcms (>=0.15.0, <=0.15.2), coop (2.5.0) +7 more potentially affected by CVE-2023-28837 via wagtail (2.5.2)

wagtail PYPI version 2.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - coderedcms =0.15.0, =0.0.3, =0.7.0rc2, =0.16.5, =0.20.1 - wagtail-textract 1.2.0.dev0 - wagtail-treemodeladmin 1.0.5 Source cves: CVE-2023-28837...

coderedcms (>=0.16.0, <=0.16.3), coop (>=2.6.0, <=2.6.5) +12 more potentially affected by CVE-2023-28837 via wagtail (2.6.3)

wagtail PYPI version 2.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - coderedcms =0.16.0, =2.6.0, =8.12.6, =10.0.0, =8.0.0, =8.0.0, =0.1.4, =2.0.3, =0.9.1, =0.9.4 Source cves: CVE-2023-28837 Source advisory:...

coderedcms (>=0.8.0, <=0.9.1), coop (2.2.0) +7 more potentially affected by CVE-2023-28837 via wagtail (2.2.2)

wagtail PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - coderedcms =0.8.0, =8.0.3, =0.0.1, =8.0.2, =3.0.1, =1.0.2, =0.0.6, =0.1.4 - wagtail-treemodeladmin 1.0.4 Source cves: CVE-2023-28837 Source...

coderedcms (>=0.11.0, <=0.14.1), coop (>=2.0.0, <=2.4.5) +4 more potentially affected by CVE-2023-28837 via wagtail (2.4.0)

wagtail PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - coderedcms =0.11.0, =2.0.0, =4.0.3, =0.6.0, =0.1.0.dev8, =0.7.0, =0.16.4 Source cves: CVE-2023-28837 Source advisory: OSV:GHSA-33PV-VCGH-JFG9...

coderedcms (>=1.0.0rc1, <=1.0.3), coop (>=3.0.0, <=3.0.4) +32 more potentially affected by CVE-2023-28837 via wagtail (3.0.3)

wagtail PYPI version 3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - coderedcms =1.0.0rc1, =3.0.0, =2.0.0, =0.3.0, =1.5.0rc1, =1.1.1, =1.1.2 - wagtail-flags 5.2.0 - wagtail-footnotes 0.8.1 - wagtail-freezer 0.1.0 an...

coderedcms (>=0.5.0, <=0.7.1), coop (>=2.1.0b0, <=2.1.4) +3 more potentially affected by CVE-2023-28837 via wagtail (2.1.3)

wagtail PYPI version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - coderedcms =0.5.0, =2.1.0b0, =0.5.0, =0.0.2, =0.0.5 Source cves: CVE-2023-28837 Source advisory: OSV:GHSA-33PV-VCGH-JFG9...