Fedora: Security Advisory (FEDORA-2026-3adb735295)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Python Library Django 4.2.x < 4.2.28 / 5.2.x < 5.2.11 / 6.0.x < 6.0.2 Multiple Vulnerabilities

The detected version of the Django Python package, Django, is 4.2.x prior to 4.2.28, 5.2.x prior to 5.2.11, or 6.0.x prior to 6.0.2. It is, therefore, affected by multiple vulnerabilities as referenced by security release advisory: - The django.contrib.auth.handlers.modwsgi.checkpassword function...

arthexis (>=0.1.3, <=0.2.3), cdm-ecommerce-backend (0.1.0) +62 more potentially affected by CVE-2026-1285 via django (>=5.2.0a1, <=5.2.10)

django PYPI version =5.2.0a1, =0.1.3, =0.1.0, =0.1.0, =1.3.0, =0.1.0, =2025.7.0, =1.5.7, =1.5.10 - django-heartbeat 2.2.3 - django-heralder 0.4.2 and more Source cves: CVE-2026-1285 Source advisory: SNYK:PYTHON-DJANGO-15199281...

admin-auth0 (>=0.1.1, <=0.1.5), alcali (3006.3.0) +150 more potentially affected by CVE-2026-1285 via django (>=4.2.0a1, <=4.2.27)

django PYPI version =4.2.0a1, =0.1.1, =4.2.6.0, =65.10.0, =7.5.0a0, =1.1.0a0, =1.0.2, =0.0.1, =1.3.9, =0.4.0, =0.0.1, =4.16.2, =4.17.1 and more Source cves: CVE-2026-1285 Source advisory: SNYK:PYTHON-DJANGO-15199281...

arches (8.0.0a1), bravoserver (3.1.0) +27 more potentially affected by CVE-2026-1285 via django (>=6.0.0a1, <=6.0.1)

django PYPI version =6.0.0a1, =1.1.0, =0.1.0, =0.1.0b2, =0.2.0b1 and more Source cves: CVE-2026-1285 Source advisory: SNYK:PYTHON-DJANGO-15199281...

admin-auth0 (>=0.1.1, <=0.1.5), alcali (3006.3.0) +150 more potentially affected by CVE-2026-1285 via django (>=4.2.0a1, <=4.2.27)

django PYPI version =4.2.0a1, =0.1.1, =4.2.6.0, =65.10.0, =7.5.0a0, =1.1.0a0, =1.0.2, =0.0.1, =1.3.9, =0.4.0, =0.0.1, =4.16.2, =4.17.1 and more Source cves: CVE-2026-1285 Source advisory: GHSA-4RRR-2H4V-F3J9...

arthexis (>=0.1.3, <=0.2.3), cdm-ecommerce-backend (0.1.0) +62 more potentially affected by CVE-2026-1285 via django (>=5.2.0a1, <=5.2.10)

django PYPI version =5.2.0a1, =0.1.3, =0.1.0, =0.1.0, =1.3.0, =0.1.0, =2025.7.0, =1.5.7, =1.5.10 - django-heartbeat 2.2.3 - django-heralder 0.4.2 and more Source cves: CVE-2026-1285 Source advisory: GHSA-4RRR-2H4V-F3J9...

arches (8.0.0a1), bravoserver (3.1.0) +27 more potentially affected by CVE-2026-1285 via django (>=6.0.0a1, <=6.0.1)

django PYPI version =6.0.0a1, =1.1.0, =0.1.0, =0.1.0b2, =0.2.0b1 and more Source cves: CVE-2026-1285 Source advisory: OSV:GHSA-4RRR-2H4V-F3J9...

arches (8.0.0a1), bravoserver (3.1.0) +27 more potentially affected by CVE-2026-1285 via django (>=6.0.0a1, <=6.0.1)

django PYPI version =6.0.0a1, =1.1.0, =0.1.0, =0.1.0b2, =0.2.0b1 and more Source cves: CVE-2026-1285 Source advisory: GHSA-4RRR-2H4V-F3J9...

admin-auth0 (>=0.1.1, <=0.1.5), alcali (3006.3.0) +150 more potentially affected by CVE-2026-1285 via django (>=4.2.0a1, <=4.2.27)

django PYPI version =4.2.0a1, =0.1.1, =4.2.6.0, =65.10.0, =7.5.0a0, =1.1.0a0, =1.0.2, =0.0.1, =1.3.9, =0.4.0, =0.0.1, =4.16.2, =4.17.1 and more Source cves: CVE-2026-1285 Source advisory: OSV:GHSA-4RRR-2H4V-F3J9...

admin-auth0 (>=0.1.1, <=0.1.5), alcali (3006.3.0) +150 more potentially affected by CVE-2026-1285 via django (>=4.2.0, <=4.2.27)

django PYPI version =4.2.0, =0.1.1, =4.2.6.0, =65.10.0, =7.5.0a0, =1.1.0a0, =1.0.2, =0.0.1, =1.3.9, =0.4.0, =0.0.1, =4.16.2, =4.17.1 and more Source cves: CVE-2026-1285 Source advisory: OSV:PYSEC-2026-45...

arthexis (>=0.1.3, <=0.2.3), cdm-ecommerce-backend (0.1.0) +59 more potentially affected by CVE-2026-1285 via django (>=5.2.0, <=5.2.10)

django PYPI version =5.2.0, =0.1.3, =0.1.0, =0.1.0, =1.3.0, =0.1.0, =2025.7.0, =1.5.7, =1.5.10 - django-heartbeat 2.2.3 - django-heralder 0.4.2 and more Source cves: CVE-2026-1285 Source advisory: OSV:PYSEC-2026-45...

bravoserver (3.1.0), creadoc (0.0.10) +19 more potentially affected by CVE-2026-1285 via django (>=6.0.0, <=6.0.1)

django PYPI version =6.0.0, =1.1.0, =0.1.0b2, =0.1.2, =0.20.4, =0.22.1 - docker-compose-control-center 5.0.0 - hyperpony 0.84.0 and more Source cves: CVE-2026-1285 Source advisory: OSV:PYSEC-2026-45...

arthexis (>=0.1.3, <=0.2.3), cdm-ecommerce-backend (0.1.0) +62 more potentially affected by CVE-2026-1285 via django (>=5.2.0a1, <=5.2.10)

django PYPI version =5.2.0a1, =0.1.3, =0.1.0, =0.1.0, =1.3.0, =0.1.0, =2025.7.0, =1.5.7, =1.5.10 - django-heartbeat 2.2.3 - django-heralder 0.4.2 and more Source cves: CVE-2026-1285 Source advisory: MEND:CVE-2026-1285...

arches (8.0.0a1), bravoserver (3.1.0) +27 more potentially affected by CVE-2026-1285 via django (>=6.0.0a1, <=6.0.1)

django PYPI version =6.0.0a1, =1.1.0, =0.1.0, =0.1.0b2, =0.2.0b1 and more Source cves: CVE-2026-1285 Source advisory: MEND:CVE-2026-1285...

CVE-2026-1285

An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. django.utils.text.Truncator.chars and Truncator.words methods with html=True and the truncatecharshtml and truncatewordshtml template filters allow a remote attacker to cause a potential denial-of-service via...