backstage-oauth2 (>=0.1.7, <=0.1.8), dbaas-aclapi (>=0.1.17, <=1.0.14) +1 more potentially affected by CVE-2026-15307 via django (1.6.10)

django PYPI version 1.6.10 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - backstage-oauth2 =0.1.7, =0.1.17, =1.0.14 - django-pesapal 0.2.0 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...