aldryn-events (2.0.0), aldryn-people (2.0.0) +7 more potentially affected by CVE-2026-54623 via django-cms (3.5.4)

django-cms PYPI version 3.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on django-cms and may be impacted: - aldryn-events 2.0.0 - aldryn-people 2.0.0 - aldryn-reversion =1.0.7, =0.2.0, =0.6.2, =0.3.0, =0.3.5 - emencia-contact-form 0.3.0 Source cves...

django-cms-qe (>=1.4.3, <=2.2.0), django-danceschool (>=0.6.2, <=0.8.3) +1 more potentially affected by CVE-2024-11406 via djangocms-attributes-field (1.2.0)

djangocms-attributes-field PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on djangocms-attributes-field and may be impacted: - django-cms-qe =1.4.3, =0.6.2, =2.28.1, =2.39.2 Source cves: CVE-2024-11406 Source advisory: OSV:PYSEC-2026-1...

danceschool-dancervax (>=0.1.1, <=0.1.5), django-danceschool (>=0.6.2, <=0.9.3) +10 more potentially affected by CVE-2025-65430 via django-allauth (0.58.2)

django-allauth PYPI version 0.58.2 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - danceschool-dancervax =0.1.1, =0.6.2, =1.3.0, =0.5.34, =0.0.4, =0.2.0, =0.40.3, =1.1.0, =3.1.1, =1.0.0, =3.4.0 Source cves:...

danceschool-dancervax (>=0.1.1, <=0.1.5), django-danceschool (>=0.9.1, <=0.9.3) +5 more potentially affected by CVE-2024-11404 via django-filer (3.0.3)

django-filer PYPI version 3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on django-filer and may be impacted: - danceschool-dancervax =0.1.1, =0.9.1, =0.2.0.0, =1.16.0, =2.7.1 Source cves: CVE-2024-11404 Source advisory: OSV:GHSA-J4V3-WWWX-5GQV...