caluma (>=5.4.0, <=5.5.2), django-cms-forms (>=0.0.1, <=0.0.11) +2 more potentially affected by CVE-2026-53877 via django (2.2.11)

django PYPI version 2.2.11 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - caluma =5.4.0, =0.0.1, =0.3.10.56, =1.2.0, =1.2.2 Source cves: CVE-2026-53877 Source advisory: OSV:GHSA-CRHF-3PFG-W68W...

django-cms-qe (>=1.4.3, <=2.2.0), django-danceschool (>=0.6.2, <=0.8.3) +1 more potentially affected by CVE-2024-11406 via djangocms-attributes-field (1.2.0)

djangocms-attributes-field PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on djangocms-attributes-field and may be impacted: - django-cms-qe =1.4.3, =0.6.2, =2.28.1, =2.39.2 Source cves: CVE-2024-11406 Source advisory: OSV:PYSEC-2026-1...

django-cms-qe (1.4.3) potentially affected by CVE-2024-11404 via django-filer (1.3.2)

django-filer PYPI version 1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on django-filer and may be impacted: - django-cms-qe 1.4.3 Source cves: CVE-2024-11404 Source advisory: OSV:PYSEC-2026-1298...

PYSEC-2026-1298 Django Filer Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type, Improper Input Validation, Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in django CMS Association django Filer allows Input Data Manipulation, Stored XSS.This issue affects django Filer: from 3 before 3....

PYSEC-2026-1303 django CMS Attributes Field Cross-site Scripting

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in django CMS Association django CMS Attributes Fields allows Stored XSS.This issue affects django CMS Attributes Fields: before 4.0...

caluma (>=5.4.0, <=5.5.2), django-cms-forms (>=0.0.1, <=0.0.11) +2 more potentially affected by CVE-2024-45231 via django (2.2.11)

django PYPI version 2.2.11 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - caluma =5.4.0, =0.0.1, =0.3.10.56, =1.2.0, =1.2.2 Source cves: CVE-2024-45231 Source advisory: OSV:PYSEC-2026-1297...

caluma (>=5.4.0, <=5.5.2), django-cms-forms (>=0.0.1, <=0.0.11) +2 more potentially affected by CVE-2026-6873 via django (2.2.11)

django PYPI version 2.2.11 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - caluma =5.4.0, =0.0.1, =0.3.10.56, =1.2.0, =1.2.2 Source cves: CVE-2026-6873 Source advisory: OSV:GHSA-H7PC-VWP9-298G...

caluma (>=5.4.0, <=5.5.2), django-cms-forms (>=0.0.1, <=0.0.11) +2 more potentially affected by CVE-2026-8404 via django (2.2.11)

django PYPI version 2.2.11 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - caluma =5.4.0, =0.0.1, =0.3.10.56, =1.2.0, =1.2.2 Source cves: CVE-2026-8404 Source advisory: OSV:GHSA-8CJM-8MP7-R2XF...

caluma (>=5.4.0, <=5.5.2), django-cms-forms (>=0.0.1, <=0.0.11) +2 more potentially affected by CVE-2025-64459 via django (2.2.11)

django PYPI version 2.2.11 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - caluma =5.4.0, =0.0.1, =0.3.10.56, =1.2.0, =1.2.2 Source cves: CVE-2025-64459 Source advisory: OSV:GHSA-FRMV-PR5F-9MCR...

aimmo (>=0.0.0.post0.dev128, <=0.1.1a0.post0.dev58), aldryn-people (1.1.1) +57 more potentially affected by CVE-2025-64459 via django (1.8.19)

django PYPI version 1.8.19 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aimmo =0.0.0.post0.dev128, =0.3.0, =0.0.0rc1, =1.0.0rc2, =0.2.0, =0.1.0a2, =0.1.0, =3.1.1, =1.0.0rc2, =1.0.14a1, =1.0.27a1 - django-dform 0.5.0 and...

caluma (>=5.7.0, <=5.9.0), coldfront (>=1.0.1, <=1.0.3) +11 more potentially affected by CVE-2025-64458 via django (2.2.13)

django PYPI version 2.2.13 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - caluma =5.7.0, =1.0.1, =2.0.0, =2.0.2, =0.4.0, =1.0.43, =2.3.3, =0.31.30, =0.6.5, =0.6.6 Source cves: CVE-2025-64458 Source advisory:...

EUVD-2017-0021

Malware in sbrugna...

EUVD-2022-0079

Malicious code in bioql PyPI...

EUVD-2024-3386

Malicious code in bioql PyPI...

EUVD-2024-0036

Malicious code in bioql PyPI...

caluma (>=5.4.0, <=5.5.2), django-cms-forms (>=0.0.1, <=0.0.11) +2 more potentially affected by CVE-2025-57833 via django (2.2.11)

django PYPI version 2.2.11 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - caluma =5.4.0, =0.0.1, =0.3.10.56, =1.2.0, =1.2.2 Source cves: CVE-2025-57833 Source advisory: OSV:GHSA-6W2R-R2M5-XQ5W...

caluma (>=5.4.0, <=5.5.2), django-cms-forms (>=0.0.1, <=0.0.11) +2 more potentially affected by CVE-2025-48432 via django (2.2.11)

django PYPI version 2.2.11 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - caluma =5.4.0, =0.0.1, =0.3.10.56, =1.2.0, =1.2.2 Source cves: CVE-2025-48432 Source advisory: OSV:GHSA-7XR5-9HCQ-CHF9...

aldryn-django-cms (3.5.3.2), django-fias (1.2.2) +1 more potentially affected by CVE-2025-48383 via django-select2 (6.3.1)

django-select2 PYPI version 6.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-select2 and may be impacted: - aldryn-django-cms 3.5.3.2 - django-fias 1.2.2 - stem-registration =0.0.27, =0.0.49 Source cves: CVE-2025-48383 Source advisory:...

CVE-2024-11404

Unrestricted Upload of File with Dangerous Type, Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in django CMS Association django Filer allows Input Data Manipulation, Stored XSS. This issue affects django Filer: from 3 before 3.3...

CVE-2024-11406

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in django CMS Association django CMS Attributes Fields allows Stored XSS. This issue affects django CMS Attributes Fields: before 4.0...