EUVD-2023-0063

Malicious code in bioql PyPI...

CVE-2023-33185

Django-SES is a drop-in mail backend for Django. The djangoses library implements a mail backend for Django using AWS Simple Email Service. The library exports the SESEventWebhookView class intended to receive signed requests from AWS to handle email bounces, subscriptions, etc. These requests ar...

CVE-2023-33185

Django-SES is a drop-in mail backend for Django. The djangoses library implements a mail backend for Django using AWS Simple Email Service. The library exports the SESEventWebhookView class intended to receive signed requests from AWS to handle email bounces, subscriptions, etc. These requests ar...

Code injection

Django-SES is a drop-in mail backend for Django. The djangoses library implements a mail backend for Django using AWS Simple Email Service. The library exports the SESEventWebhookView class intended to receive signed requests from AWS to handle email bounces, subscriptions, etc. These requests ar...

tendenci (>=11.0.0, <=11.3.1) potentially affected by CVE-2023-33185 via django-ses (0.7.1)

django-ses PYPI version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-ses and may be impacted: - tendenci =11.0.0, =11.3.1 Source cves: CVE-2023-33185 Source advisory: OSV:PYSEC-2023-82...

tendenci (>=11.4.0, <=11.4.9) potentially affected by CVE-2023-33185 via django-ses (0.8.12)

django-ses PYPI version 0.8.12 is affected by a known vulnerability. The following packages have a transitive dependency on django-ses and may be impacted: - tendenci =11.4.0, =11.4.9 Source cves: CVE-2023-33185 Source advisory: OSV:PYSEC-2023-82...

django-ses-sns-tracker (1.1.5) potentially affected by CVE-2023-33185 via django-ses (1.0.3)

django-ses PYPI version 1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on django-ses and may be impacted: - django-ses-sns-tracker 1.1.5 Source cves: CVE-2023-33185 Source advisory: OSV:PYSEC-2023-82...

tendenci (>=14.0.3, <=14.4.0) potentially affected by CVE-2023-33185 via django-ses (2.2.0)

django-ses PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-ses and may be impacted: - tendenci =14.0.3, =14.4.0 Source cves: CVE-2023-33185 Source advisory: OSV:PYSEC-2023-82...

speedpycom (0.1.5) potentially affected by CVE-2023-33185 via django-ses (2.6.1)

django-ses PYPI version 2.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-ses and may be impacted: - speedpycom 0.1.5 Source cves: CVE-2023-33185 Source advisory: OSV:PYSEC-2023-82...

PYSEC-2023-82

Django-SES is a drop-in mail backend for Django. The djangoses library implements a mail backend for Django using AWS Simple Email Service. The library exports the SESEventWebhookView class intended to receive signed requests from AWS to handle email bounces, subscriptions, etc. These requests ar...

django-ses-sns-tracker (1.1.5), speedpycom (0.1.5) +1 more potentially affected by CVE-2023-33185 via django-ses (>=0.7.1, <=2.6.1)

django-ses PYPI version =0.7.1, =11.0.0, =14.4.0 Source cves: CVE-2023-33185 Source advisory: MEND:CVE-2023-33185...

CVE-2023-33185 Incorrect signature verification in django-ses

Django-SES is a drop-in mail backend for Django. The djangoses library implements a mail backend for Django using AWS Simple Email Service. The library exports the SESEventWebhookView class intended to receive signed requests from AWS to handle email bounces, subscriptions, etc. These requests ar...

CVE-2023-33185

Django-SES (django_ses) exposes a SESEventWebhookView to verify AWS-signed requests for bounces/subscriptions. The vulnerability was due to a flawed signature verification that allowed specifying arbitrary public certificates. The issue affects django_ses up to version prior to 3.5.0 and was fixe...

CVE-2023-33185 Incorrect signature verification in django-ses

Django-SES is a drop-in mail backend for Django. The djangoses library implements a mail backend for Django using AWS Simple Email Service. The library exports the SESEventWebhookView class intended to receive signed requests from AWS to handle email bounces, subscriptions, etc. These requests ar...

CVE-2023-33185: Improper Verification of Cryptographic Signature

Django-SES is a drop-in mail backend for Django. The djangoses library implements a mail backend for Django using AWS Simple Email Service. The library exports the SESEventWebhookView class intended to receive signed requests from AWS to handle email bounces, subscriptions, etc. These requests ar...

Django-SES data forgery vulnerability

Django-SES is the Django email backend for Amazon Simple Email Service. A security vulnerability exists in Django-SES versions prior to 3.5.0 that stems from allowing users to specify arbitrary public certificates...

GHSA-QG36-9JXH-FJ25 Incorrect signature verification in django-ses

The djangoses library implements a mail backend for Django using AWS Simple Email Service. The library exports the SESEventWebhookView class intended to receive signed requests from AWS to handle email bounces, subscriptions, etc. These requests are signed by AWS and are verified by djangoses,...

tendenci (>=11.0.0, <=11.3.1) potentially affected by CVE-2023-33185 via django-ses (0.7.1)

django-ses PYPI version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-ses and may be impacted: - tendenci =11.0.0, =11.3.1 Source cves: CVE-2023-33185 Source advisory: OSV:GHSA-QG36-9JXH-FJ25...

tendenci (>=11.4.0, <=11.4.9) potentially affected by CVE-2023-33185 via django-ses (0.8.12)

django-ses PYPI version 0.8.12 is affected by a known vulnerability. The following packages have a transitive dependency on django-ses and may be impacted: - tendenci =11.4.0, =11.4.9 Source cves: CVE-2023-33185 Source advisory: OSV:GHSA-QG36-9JXH-FJ25...

django-ses-sns-tracker (1.1.5) potentially affected by CVE-2023-33185 via django-ses (1.0.3)

django-ses PYPI version 1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on django-ses and may be impacted: - django-ses-sns-tracker 1.1.5 Source cves: CVE-2023-33185 Source advisory: OSV:GHSA-QG36-9JXH-FJ25...