django-admin-caching (>=0.1.0, <=0.1.2), django-cognito (1.1.11) +3 more potentially affected by CVE-2026-48587 via django (1.10.0)

django PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-admin-caching =0.1.0, =2.0.0, =0.1.0, =0.3.1, =0.4.0 Source cves: CVE-2026-48587 Source advisory: OSV:GHSA-923M-GV2P-W5QP...

django-admin-caching (>=0.1.0, <=0.1.2), django-cognito (1.1.11) +3 more potentially affected by CVE-2026-8404 via django (1.10.0)

django PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-admin-caching =0.1.0, =2.0.0, =0.1.0, =0.3.1, =0.4.0 Source cves: CVE-2026-8404 Source advisory: OSV:GHSA-8CJM-8MP7-R2XF...

CVE-2026-42197

RELATE is a web-based courseware package. Versions prior to commit 555f0efb1c5bd7531c07cd73724d7e566a81f620 have a stored cross-site scripting vulnerability that allows any enrolled student to execute arbitrary JavaScript in an administrator's browser session, potentially leading to full admin...

CVE-2026-42197 RELATE Vulnerable to Stored XSS via Unprivileged User Profile

RELATE is a web-based courseware package. Versions prior to commit 555f0efb1c5bd7531c07cd73724d7e566a81f620 have a stored cross-site scripting vulnerability that allows any enrolled student to execute arbitrary JavaScript in an administrator's browser session, potentially leading to full admin...

CVE-2026-42197: Improper Neutralization of Input During Web Page Generation

RELATE is a web-based courseware package. Versions prior to commit 555f0efb1c5bd7531c07cd73724d7e566a81f620 have a stored cross-site scripting vulnerability that allows any enrolled student to execute arbitrary JavaScript in an administrator's browser session, potentially leading to full admin...

CVE-2026-44987

SysReptor is a fully customizable pentest reporting platform. Prior to version 2026.29, users with "User Admin" permissions can change the email addresses of users with "Superuser" permissions. If the SysReptor installation has the "Forgot Password" functionality enabled non-default, they can res...

CVE-2026-44987

SysReptor is a fully customizable pentest reporting platform. Prior to version 2026.29, users with "User Admin" permissions can change the email addresses of users with "Superuser" permissions. If the SysReptor installation has the "Forgot Password" functionality enabled non-default, they can res...

CVE-2026-44987 SysReptor: Privilege Escalation from User Admin to Superuser

SysReptor is a fully customizable pentest reporting platform. Prior to version 2026.29, users with "User Admin" permissions can change the email addresses of users with "Superuser" permissions. If the SysReptor installation has the "Forgot Password" functionality enabled non-default, they can res...

CVE-2026-44987 SysReptor: Privilege Escalation from User Admin to Superuser

SysReptor is a fully customizable pentest reporting platform. Prior to version 2026.29, users with "User Admin" permissions can change the email addresses of users with "Superuser" permissions. If the SysReptor installation has the "Forgot Password" functionality enabled non-default, they can res...

EUVD-2026-28870

SysReptor is a fully customizable pentest reporting platform. Prior to version 2026.29, users with "User Admin" permissions can change the email addresses of users with "Superuser" permissions. If the SysReptor installation has the "Forgot Password" functionality enabled non-default, they can res...

Missing Authorization

Overview Django is a high-level Python Web framework that encourages rapid development and clean, pragmatic design. Affected versions of this package are vulnerable to Missing Authorization in the admin changelist forms using ModelAdmin.listeditable. An attacker can gain unauthorized access to...

CVE-2026-4292

An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. Admin changelist forms using ModelAdmin.listeditable incorrectly allowed new instances to be created via forged POST data. Earlier, unsupported Django series such as 5.0.x, 4.1.x, and 3.2.x were not evaluated a...

CVE-2026-4292

The Django web development framework is vulnerable to a privilege abuse issue in its admin changelist forms . Specifically, forms utilizing ModelAdmin.list_editable incorrectly permitted the creation of new instances through forged POST data . This vulnerability affects Django versions 6.0 before...

Linux Distros Unpatched Vulnerability : CVE-2026-4292

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. Admin changelist forms using ModelAdmin.listeditable incorrectly allowed...

django-admin-oauth-sessions (0.1.5), django-allauth-webauthn (>=0.1.1, <=0.2.3) +4 more potentially affected by CVE-2025-65430 via django-allauth (0.45.0)

django-allauth PYPI version 0.45.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - django-admin-oauth-sessions 0.1.5 - django-allauth-webauthn =0.1.1, =0.0.1, =0.0.16 - rdmo 1.8.0 Source cves: CVE-2025-65430 Source...

django-admin-oauth-sessions (0.1.5), django-allauth-webauthn (>=0.1.1, <=0.2.3) +4 more potentially affected by CVE-2025-65431 via django-allauth (0.45.0)

django-allauth PYPI version 0.45.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - django-admin-oauth-sessions 0.1.5 - django-allauth-webauthn =0.1.1, =0.0.1, =0.0.16 - rdmo 1.8.0 Source cves: CVE-2025-65431 Source...

django-admin-caching (>=0.1.0, <=0.1.2), django-cognito (1.1.11) +3 more potentially affected by CVE-2025-64458 via django (1.10.0)

django PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-admin-caching =0.1.0, =2.0.0, =0.1.0, =0.3.1, =0.4.0 Source cves: CVE-2025-64458 Source advisory: OSV:GHSA-QW25-V68C-QJF3...

django-admin-caching (0.1.3), django-budget (0.7.2) +19 more potentially affected by CVE-2025-64458 via django (1.11.0)

django PYPI version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-admin-caching 0.1.3 - django-budget 0.7.2 - django-currentuser =0.1.0, =0.1.2, =1.5.0, =1.1.7, =0.0.1, =1.18.0, =1.20.0 and more Source cves...

django-admin-caching (>=0.1.0, <=0.1.2), django-cognito (1.1.11) +3 more potentially affected by CVE-2025-48432 via django (1.10.0)

django PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-admin-caching =0.1.0, =2.0.0, =0.1.0, =0.3.1, =0.4.0 Source cves: CVE-2025-48432 Source advisory: OSV:GHSA-7XR5-9HCQ-CHF9...

cfl-common (8.6.0), cg-django-uaa (2.1.9) +10 more potentially affected by CVE-2025-32873 via django (5.2.0)

django PYPI version 5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - cfl-common 8.6.0 - cg-django-uaa 2.1.9 - django-admin-flexlist =0.1.0, =1.92.0.5, =0.1.0, =1.0.0, =0.199.0, =1.2.4, =1.2.7 Source cves: CVE-2025-328...