Security Bulletin: IBM Edge Data Collector uses django-4.2.25-py3-none-any.whl which is vulnerable to CVE-2025-64458, CVE-2025-64459.

Summary IBM Edge Data Collector uses django-4.2.25-py3-none-any.whl which is vulnerable to CVE-2025-64458, CVE-2025-64459. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2025-64458 DESCRIPTION: An issue was discovered in 5.1 before 5.1.14, 4.2...

Security Bulletin: Denial-of-service attack, SQL injection, and other vulnerabilities might affect IBM Storage Defender - Resiliency Service

Summary IBM Storage Defender - Resiliency Service is vulnerable to denial-of-service attack, SQL injection, and others. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2025-64458 DESCRIPTION: An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before...

OESA-2025-2679 python-django security update

A high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fixes: An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8. NFKC normalization in Python is slow on Windows. As a consequence,...

CVE-2025-64458

An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8. NFKC normalization in Python is slow on Windows. As a consequence, django.http.HttpResponseRedirect, django.http.HttpResponsePermanentRedirect, and the shortcut django.shortcuts.redirect were subject to a...

aa-charlink (>=0.1.1, <=1.0.0), aa-drifters (0.1.0a0) +538 more potentially affected by CVE-2025-64458 via django (>=4.0.0a1, <=4.2.25)

django PYPI version =4.0.0a1, =0.1.1, =1.0.0b1, =0.1.0a0, =0.11.0a0, =0.1.1, =1.1.0, =0.1.1, =0.1.0, =0.0.3, =4.0.9.0, =4.2.18.0 and more Source cves: CVE-2025-64458 Source advisory: SNYK:PYTHON-DJANGO-13837025...

11x-wagtail-blog (>=0.0.0, <=0.2.0), aldryn-django (>=5.0.2.0, <=5.1.5.0) +291 more potentially affected by CVE-2025-64458 via django (>=5.0.0a1, <=5.1.13)

django PYPI version =5.0.0a1, =0.0.0, =5.0.2.0, =0.0.15, =1.0.0, =1.14.3, =0.0.20, =0.0.13, =0.0.19, =0.0.34, =0.0.50, =0.0.5, =0.0.11, =1.0.3, =1.0.4 and more Source cves: CVE-2025-64458 Source advisory: SNYK:PYTHON-DJANGO-13837025...

aimmo (>=2.0.0, <=2.0.1), cfl-common (>=6.0.0, <=6.4.1) +12 more potentially affected by CVE-2025-64458 via django (3.2.12)

django PYPI version 3.2.12 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aimmo =2.0.0, =6.0.0, =6.0.0, =1.0.3, =4.0.0, =4.0.6 - testmodule000101 1.1.0 - vmcenter 1.2.0rc3 Source cves: CVE-2025-64458 Source advisory:...

aether-sdk (>=1.3.4, <=1.3.8), apis-bibsonomy (>=0.2.0, <=0.3.0) +171 more potentially affected by CVE-2025-64458 via django (3.1.14)

django PYPI version 3.1.14 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aether-sdk =1.3.4, =0.2.0, =0.16.12, =0.8.8, =0.6.0, =0.0.1, =2.11.0, =0.1.1, =0.11.1, =0.1.1, =0.1.0, =0.3.12 and more Source cves: CVE-2025-64458...

11x-wagtail-blog (>=0.0.0, <=0.2.0), aldryn-django (>=5.0.2.0, <=5.1.5.0) +291 more potentially affected by CVE-2025-64458 via django (>=5.0.0a1, <=5.1.13)

django PYPI version =5.0.0a1, =0.0.0, =5.0.2.0, =0.0.15, =1.0.0, =1.14.3, =0.0.20, =0.0.13, =0.0.19, =0.0.34, =0.0.50, =0.0.5, =0.0.11, =1.0.3, =1.0.4 and more Source cves: CVE-2025-64458 Source advisory: GHSA-QW25-V68C-QJF3...

kodland-sso-server (>=0.1.1, <=0.3.0) potentially affected by CVE-2025-64458 via django (2.0.1)

django PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - kodland-sso-server =0.1.1, =0.3.0 Source cves: CVE-2025-64458 Source advisory: OSV:GHSA-QW25-V68C-QJF3...

django-afip (>=1.0.0, <=1.1.1), django-mercadopago-simple (>=1.0.0, <=2.0.2) +1 more potentially affected by CVE-2025-64458 via django (1.8.4)

django PYPI version 1.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-afip =1.0.0, =1.0.0, =0.2.0, =0.4.0 Source cves: CVE-2025-64458 Source advisory: OSV:GHSA-QW25-V68C-QJF3...

backstage-oauth2 (>=0.1.7, <=0.1.8), dbaas-aclapi (>=0.1.17, <=1.0.14) +1 more potentially affected by CVE-2025-64458 via django (1.6.10)

django PYPI version 1.6.10 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - backstage-oauth2 =0.1.7, =0.1.17, =1.0.14 - django-pesapal 0.2.0 Source cves: CVE-2025-64458 Source advisory: OSV:GHSA-QW25-V68C-QJF3...

correctiv-chartbuilder (>=0.0.1, <=0.0.5), django-autoconfig (0.3.3) +1 more potentially affected by CVE-2025-64458 via django (1.8.0rc1)

django PYPI version 1.8.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - correctiv-chartbuilder =0.0.1, =1.0.25, =1.0.27 Source cves: CVE-2025-64458 Source advisory: OSV:GHSA-QW25-V68C-QJF3...

fusionflow-upload (>=0.0.6, <=0.1.5) potentially affected by CVE-2025-64458 via django (2.2.7)

django PYPI version 2.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - fusionflow-upload =0.0.6, =0.1.5 Source cves: CVE-2025-64458 Source advisory: OSV:GHSA-QW25-V68C-QJF3...

edc (>=0.3.14, <=0.3.16), thenewboston-ml-dev (0.2.3) potentially affected by CVE-2025-64458 via django (3.1.8)

django PYPI version 3.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - edc =0.3.14, =0.3.16 - thenewboston-ml-dev 0.2.3 Source cves: CVE-2025-64458 Source advisory: OSV:GHSA-QW25-V68C-QJF3...

django-qr-toolkit-core (>=2.7.0, <=3.4.0) potentially affected by CVE-2025-64458 via django (3.0.11)

django PYPI version 3.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-qr-toolkit-core =2.7.0, =3.4.0 Source cves: CVE-2025-64458 Source advisory: OSV:GHSA-QW25-V68C-QJF3...

caluma (5.6.0), django-covid19 (>=0.3.0a0, <=0.4.0b1) +6 more potentially affected by CVE-2025-64458 via django (2.2.12)

django PYPI version 2.2.12 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - caluma 5.6.0 - django-covid19 =0.3.0a0, =0.2.1, =2.2.2, =0.9.7, =0.1.3, =0.30.7 Source cves: CVE-2025-64458 Source advisory: OSV:GHSA-QW25-V68C-QJF...

aimmo (>=0.0.0.post0.dev128, <=0.1.1a0.post0.dev58), aldryn-people (1.1.1) +57 more potentially affected by CVE-2025-64458 via django (1.8.19)

django PYPI version 1.8.19 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aimmo =0.0.0.post0.dev128, =0.3.0, =0.0.0rc1, =1.0.0rc2, =0.2.0, =0.1.0a2, =0.1.0, =3.1.1, =1.0.0rc2, =1.0.14a1, =1.0.27a1 - django-dform 0.5.0 and...

directory-api-client (>=9.14.0, <=9.15.0), directory-api-external (>=4.1.1, <=4.2.0) +9 more potentially affected by CVE-2025-64458 via django (1.11.5)

django PYPI version 1.11.5 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - directory-api-client =9.14.0, =4.1.1, =0.0.1, =0.0.1, =1.0.5, =6.4.1, =0.3.0, =2.4.1, =2.0.1, =0.0.6, =0.0.11 Source cves: CVE-2025-64458 Source...

corgy-erp (>=0.0.1, <=1.0.7), django-account-rcg-chandu (0.1.0) +2 more potentially affected by CVE-2025-64458 via django (3.0.6)

django PYPI version 3.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - corgy-erp =0.0.1, =1.0.1, =1.0.6 Source cves: CVE-2025-64458 Source advisory: OSV:GHSA-QW25-V68C-QJF3...