CVE-2026-82833

A vulnerability was identified in Doccano Open Source Annotation Tools for Machine Learning Practitioners and Auto Labeling Pipeline Module to Annotate a Document Automatically up to 1.8.5. Affected by this issue is the function ExampleDetail of the file /v1/projects/1/examples/ of the component...

CVE-2026-82834

A security flaw has been discovered in Doccano Open Source Annotation Tools for Machine Learning Practitioners and Auto Labeling Pipeline Module to Annotate a Document Automatically up to 1.8.5. This affects the function LabelList of the file /v1/projects/1/category-types of the component...

EUVD-2026-68748

A security flaw has been discovered in Doccano Open Source Annotation Tools for Machine Learning Practitioners and Auto Labeling Pipeline Module to Annotate a Document Automatically up to 1.8.5. This affects the function LabelList of the file /v1/projects/1/category-types of the component...

CVE-2026-82834 Doccano Open Source Annotation Tools for Machine Learning Practitioners Bulk-Delete Endpoint category-types LabelList access control

A security flaw has been discovered in Doccano Open Source Annotation Tools for Machine Learning Practitioners and Auto Labeling Pipeline Module to Annotate a Document Automatically up to 1.8.5. This affects the function LabelList of the file /v1/projects/1/category-types of the component...

CVE-2026-82834

Doccano (open-source annotation tools for ML practitioners) versions up to 1.8.5 are affected by an improper access control flaw in the Bulk-Delete Endpoint , specifically the LabelList function at /v1/projects/1/category-types. A remote attacker with low privileges can manipulate this endpoint t...

CVE-2026-82834 Doccano Open Source Annotation Tools for Machine Learning Practitioners Bulk-Delete Endpoint category-types LabelList access control

A security flaw has been discovered in Doccano Open Source Annotation Tools for Machine Learning Practitioners and Auto Labeling Pipeline Module to Annotate a Document Automatically up to 1.8.5. This affects the function LabelList of the file /v1/projects/1/category-types of the component...

CVE-2026-82833 Doccano Open Source Annotation Tools for Machine Learning Practitioners Project Example Detail Endpoint examples ExampleDetail access control

A vulnerability was identified in Doccano Open Source Annotation Tools for Machine Learning Practitioners and Auto Labeling Pipeline Module to Annotate a Document Automatically up to 1.8.5. Affected by this issue is the function ExampleDetail of the file /v1/projects/1/examples/ of the component...

CVE-2026-82833

An improper access control vulnerability exists in the ExampleDetail function of the Project Example Detail Endpoint (/v1/projects/1/examples/) in Doccano (open-source annotation tool for ML practitioners), affecting versions up to 1.8.5 . The flaw allows a remote attacker with low privileges to ...

EUVD-2026-68756

A vulnerability was identified in Doccano Open Source Annotation Tools for Machine Learning Practitioners and Auto Labeling Pipeline Module to Annotate a Document Automatically up to 1.8.5. Affected by this issue is the function ExampleDetail of the file /v1/projects/1/examples/ of the component...

CVE-2026-82833 Doccano Open Source Annotation Tools for Machine Learning Practitioners Project Example Detail Endpoint examples ExampleDetail access control

A vulnerability was identified in Doccano Open Source Annotation Tools for Machine Learning Practitioners and Auto Labeling Pipeline Module to Annotate a Document Automatically up to 1.8.5. Affected by this issue is the function ExampleDetail of the file /v1/projects/1/examples/ of the component...

CVE-2026-82834: Improper Access Control

A security flaw has been discovered in Doccano Open Source Annotation Tools for Machine Learning Practitioners and Auto Labeling Pipeline Module to Annotate a Document Automatically up to 1.8.5. This affects the function LabelList of the file /v1/projects/1/category-types of the component...

CVE-2026-82833: Improper Access Control

A vulnerability was identified in Doccano Open Source Annotation Tools for Machine Learning Practitioners and Auto Labeling Pipeline Module to Annotate a Document Automatically up to 1.8.5. Affected by this issue is the function ExampleDetail of the file /v1/projects/1/examples/ of the component...

PT-2026-83970

A security flaw has been discovered in Doccano Open Source Annotation Tools for Machine Learning Practitioners and Auto Labeling Pipeline Module to Annotate a Document Automatically up to 1.8.5. This affects the function LabelList of the file /v1/projects/1/category-types of the component...

PT-2026-83969

Name of the Vulnerable Software and Affected Versions Doccano Open Source Annotation Tools for Machine Learning Practitioners versions prior to 1.8.6 Description Improper access controls exist within the Project Example Detail Endpoint. A remote attacker can exploit this issue via the ExampleDeta...

chatgpt-memory (>=0.0.0, <=0.0.1), doccano-mini (>=0.0.5, <=0.0.10) +2 more potentially affected by CVE-2026-55443 via langchain (0.0.113)

langchain PYPI version 0.0.113 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - chatgpt-memory =0.0.0, =0.0.5, =0.0.40, =0.1.16, =0.1.17 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...

doccano-mini (>=0.0.1, <=0.0.4), langchain-contrib (>=0.0.1, <=0.0.3) +2 more potentially affected by CVE-2026-55443 via langchain (0.0.112)

langchain PYPI version 0.0.112 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - doccano-mini =0.0.1, =0.0.1, =0.0.3 - langchain-visualizer 0.0.16 - vcr-langchain 0.0.19 Source cves: CVE-2026-55443 Source advisory:...

chatgpt-memory (>=0.0.0, <=0.0.1), doccano-mini (>=0.0.5, <=0.0.10) +2 more potentially affected by CVE-2026-55443 via langchain (0.0.113)

langchain PYPI version 0.0.113 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - chatgpt-memory =0.0.0, =0.0.5, =0.0.40, =0.1.16, =0.1.17 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...

apache-airflow-providers-celery (>=2.1.0rc1, <=2.1.0), celery-director (>=0.5.0, <=0.10.0) +11 more potentially affected by unknown CVE via flower (>=0.9.5, <=1.2.0)

flower PYPI version =0.9.5, =2.1.0rc1, =0.5.0, =1.8.1, =1.8.4.1, =0.1.0, =0.4.8, =0.6.0, =1.4.0, =0.1.0, =0.6.0, =0.2.1a0, =2.13.0a7 Source cves: unknown CVE Source advisory: MEND:WS-2016-0075...

doccano (>=1.8.2, <=1.8.3), emus-web (0.1.0) +6 more potentially affected by CVE-2026-27982 via django-allauth (0.50.0)

django-allauth PYPI version 0.50.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - doccano =1.8.2, =1.0.0b6, =1.40.0, =1.92.0, =0.1.6, =0.1.0, =0.11.12 Source cves: CVE-2026-27982 Source advisory:...

aleksis-core (>=3.0.0b0, <=3.0.0b2), doccano (>=1.8.4, <=1.8.5) +3 more potentially affected by CVE-2026-27982 via django-allauth (0.52.0)

django-allauth PYPI version 0.52.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - aleksis-core =3.0.0b0, =1.8.4, =1.8.4.1, =3.11.8, =1.9.0, =1.10.2 Source cves: CVE-2026-27982 Source advisory: OSV:GHSA-2JPR-83RG-V...