wger (1.5.0) potentially affected by CVE-2024-21520 via djangorestframework (2.3.13)

djangorestframework PYPI version 2.3.13 is affected by a known vulnerability. The following packages have a transitive dependency on djangorestframework and may be impacted: - wger 1.5.0 Source cves: CVE-2024-21520 Source advisory: OSV:GHSA-GW84-84PC-XP82...

Django REST framework security vulnerability

Django REST framework is Django REST framework open source a powerful and flexible toolkit for building Web APIs. A security vulnerability exists in the Django REST framework prior to version 3.15.2, which stems from a cross-site scripting vulnerability in breaklongheaders...

autohooks-plugin-pdoc (>=0.1.1, <=0.1.2), django-pdf-reactor (0.1.3) potentially affected by CVE-2024-38526 via pdoc (0.3.2)

pdoc PYPI version 0.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on pdoc and may be impacted: - autohooks-plugin-pdoc =0.1.1, =0.1.2 - django-pdf-reactor 0.1.3 Source cves: CVE-2024-38526 Source advisory: OSV:GHSA-5VGJ-GGM4-FG62...

OPENSUSE-SU-2024:14065-1 python310-django-allauth-0.63.3-1.1 on GA media

These are all security issues fixed in the python310-django-allauth-0.63.3-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2024-6224

Name of the Vulnerable Software and Affected Versions Django versions 4.2 through 4.2.13 Django versions 5.0 through 5.0.6 Description The issue allows remote attackers to enumerate users via a timing attack involving login requests for users with an unusable password. This is due to the...

PT-2024-6226

Name of the Vulnerable Software and Affected Versions Django versions 4.2 through 4.2.13 Django versions 5.0 through 5.0.6 Description The issue is related to derived classes of the django.core.files.storage.Storage base class that override the generate filename function without replicating the...

PT-2024-6225

Name of the Vulnerable Software and Affected Versions Django versions 4.2 through 4.2.13 Django versions 5.0 through 5.0.6 Description The issue is related to a potential denial of service attack via certain inputs with a very large number of brackets in the urlize and urlizetrunc functions. This...

Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data

Summary IBM has released the below fix for IBM Db2® on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data in response to multiple vulnerabilities found in multiple components. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details...

bpp-iplweb (>=202304.1100.0, <=202504.1174.0), django-saas-email (>=0.1.21, <=0.1.29) +8 more potentially affected by CVE-2024-38357 via django-tinymce (>=1.5.1b4, <=4.0.0)

django-tinymce PYPI version =1.5.1b4, =202304.1100.0, =0.1.21, =0.8.0, =3.3.3, =0.6.0, =0.1.3.2, =1.0.0b1, =0.3.0, =0.5.2 - zinnia-wysiwyg-tinymce 1.4.0 Source cves: CVE-2024-38357 Source advisory: MEND:CVE-2024-38357...

bpp-iplweb (>=202304.1100.0, <=202504.1174.0), django-saas-email (>=0.1.21, <=0.1.29) +8 more potentially affected by CVE-2024-38356 via django-tinymce (>=1.5.1b4, <=4.0.0)

django-tinymce PYPI version =1.5.1b4, =202304.1100.0, =0.1.21, =0.8.0, =3.3.3, =0.6.0, =0.1.3.2, =1.0.0b1, =0.3.0, =0.5.2 - zinnia-wysiwyg-tinymce 1.4.0 Source cves: CVE-2024-38356 Source advisory: MEND:CVE-2024-38356...

tinyblog (>=0.4.0, <=0.5.2) potentially affected by CVE-2024-38356 via django-tinymce (1.5.3)

django-tinymce PYPI version 1.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on django-tinymce and may be impacted: - tinyblog =0.4.0, =0.5.2 Source cves: CVE-2024-38356 Source advisory: OSV:GHSA-9HCV-J9PV-QMPH...

django-saas-email (>=0.1.21, <=0.1.29) potentially affected by CVE-2024-38356 via django-tinymce (2.7.0)

django-tinymce PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-tinymce and may be impacted: - django-saas-email =0.1.21, =0.1.29 Source cves: CVE-2024-38356 Source advisory: OSV:GHSA-9HCV-J9PV-QMPH...

geonode (3.3.3) potentially affected by CVE-2024-38356 via django-tinymce (3.3.0)

django-tinymce PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-tinymce and may be impacted: - geonode 3.3.3 Source cves: CVE-2024-38356 Source advisory: OSV:GHSA-9HCV-J9PV-QMPH...

geonode (>=4.0.0rc0, <=4.0.0.post1) potentially affected by CVE-2024-38356 via django-tinymce (3.4.0)

django-tinymce PYPI version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-tinymce and may be impacted: - geonode =4.0.0rc0, =4.0.0.post1 Source cves: CVE-2024-38356 Source advisory: OSV:GHSA-9HCV-J9PV-QMPH...

grooveshop-django-api (>=0.94.0, <=0.127.0) potentially affected by CVE-2024-38356 via django-tinymce (4.0.0)

django-tinymce PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-tinymce and may be impacted: - grooveshop-django-api =0.94.0, =0.127.0 Source cves: CVE-2024-38356 Source advisory: GHSA-9HCV-J9PV-QMPH...

tinyblog (0.3.0) potentially affected by CVE-2024-38356 via django-tinymce (1.5.1b4)

django-tinymce PYPI version 1.5.1b4 is affected by a known vulnerability. The following packages have a transitive dependency on django-tinymce and may be impacted: - tinyblog 0.3.0 Source cves: CVE-2024-38356 Source advisory: OSV:GHSA-9HCV-J9PV-QMPH...

hazard-feed (>=0.2.0, <=0.2.5) potentially affected by CVE-2024-38356 via django-tinymce (3.2.0)

django-tinymce PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-tinymce and may be impacted: - hazard-feed =0.2.0, =0.2.5 Source cves: CVE-2024-38356 Source advisory: OSV:GHSA-9HCV-J9PV-QMPH...

zinnia-wysiwyg-tinymce (1.4.0) potentially affected by CVE-2024-38356 via django-tinymce (2.2.0)

django-tinymce PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-tinymce and may be impacted: - zinnia-wysiwyg-tinymce 1.4.0 Source cves: CVE-2024-38356 Source advisory: OSV:GHSA-9HCV-J9PV-QMPH...

grooveshop-django-api (>=0.94.0, <=0.127.0) potentially affected by CVE-2024-38356 via django-tinymce (4.0.0)

django-tinymce PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-tinymce and may be impacted: - grooveshop-django-api =0.94.0, =0.127.0 Source cves: CVE-2024-38356 Source advisory: OSV:GHSA-9HCV-J9PV-QMPH...

hazard-feed (>=0.1.3.2, <=0.1.6.1) potentially affected by CVE-2024-38356 via django-tinymce (2.8.0)

django-tinymce PYPI version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-tinymce and may be impacted: - hazard-feed =0.1.3.2, =0.1.6.1 Source cves: CVE-2024-38356 Source advisory: OSV:GHSA-9HCV-J9PV-QMPH...