django-oscar-moysklad (>=0.2.0, <=0.2.3), drf-paytm (0.0.1) +3 more potentially affected by CVE-2026-48587 via django (2.1.3)

django PYPI version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-oscar-moysklad =0.2.0, =1.4.3, =1.6.5 Source cves: CVE-2026-48587 Source advisory: OSV:GHSA-923M-GV2P-W5QP...

cosmicdbsemantic (>=0.0.1, <=0.0.23), drf-account (0.0.1) +3 more potentially affected by CVE-2026-48587 via django (2.0.5)

django PYPI version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - cosmicdbsemantic =0.0.1, =0.9.2, =0.9.5 Source cves: CVE-2026-48587 Source advisory: OSV:GHSA-923M-GV2P-W5QP...

drf-tus (1.21.1), richie (0.1.0) potentially affected by CVE-2026-48587 via django (1.11.14)

django PYPI version 1.11.14 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - drf-tus 1.21.1 - richie 0.1.0 Source cves: CVE-2026-48587 Source advisory: OSV:GHSA-923M-GV2P-W5QP...

django-rulengine (0.0.1), drf-httpsig (1.2.0) +2 more potentially affected by CVE-2026-48587 via django (1.7.0)

django PYPI version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-rulengine 0.0.1 - drf-httpsig 1.2.0 - tri-form 1.6.1 - tri-query 1.5.0 Source cves: CVE-2026-48587 Source advisory: OSV:GHSA-923M-GV2P-W5QP...

dj-core-drf (>=0.0.1, <=0.0.3), openwisp-users (0.1.4) potentially affected by unknown CVE via django-allauth (0.32.0)

django-allauth PYPI version 0.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - dj-core-drf =0.0.1, =0.0.3 - openwisp-users 0.1.4 Source cves: unknown CVE Source advisory: MEND:WS-2017-3794...

CVE-2026-41519: Insufficient Session Expiration

Weblate is a web based localization tool. Prior to version 5.17.1, when a user changes their password, browser sessions are correctly invalidated via "cyclesessionkeys", but DRF API tokens "wlu" prefix stored in "authtokentoken" are not revoked. This issue has been patched in version 5.17.1...

aiohttp-ext-auth (>=0.1.1, <=0.1.2), ais-dom (>=0.76.5, <=0.91.5) +34 more potentially affected by CVE-2026-32597 via pyjwt (1.6.4)

pyjwt PYPI version 1.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - aiohttp-ext-auth =0.1.1, =0.76.5, =0.0.1, =0.0.1, =0.4.0, =1.0.0, =0.0.19, =0.5.0, =1.1.7, =0.31.0, =0.0.1, =0.0.2, =0.1.0 and more Source cves:...

dj-core-drf (>=0.0.4, <=0.0.8), openwisp-users (>=0.1.5, <=0.1.6) +1 more potentially affected by CVE-2026-27982 via django-allauth (0.33.0)

django-allauth PYPI version 0.33.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - dj-core-drf =0.0.4, =0.1.5, =0.0.6, =0.0.12 Source cves: CVE-2026-27982 Source advisory: OSV:GHSA-2JPR-83RG-V67J...

dj-core-drf (0.1.0), django-zero (>=0.0.1, <=0.0.3) +1 more potentially affected by CVE-2026-27982 via django-allauth (0.34.0)

django-allauth PYPI version 0.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - dj-core-drf 0.1.0 - django-zero =0.0.1, =0.0.3 - openwisp-users 0.1.7 Source cves: CVE-2026-27982 Source advisory:...

dj-core-drf (>=0.0.1, <=0.0.3), openwisp-users (0.1.4) potentially affected by CVE-2026-27982 via django-allauth (0.32.0)

django-allauth PYPI version 0.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - dj-core-drf =0.0.1, =0.0.3 - openwisp-users 0.1.4 Source cves: CVE-2026-27982 Source advisory: OSV:GHSA-2JPR-83RG-V67J...

dj-core-drf (0.1.0), django-zero (>=0.0.1, <=0.0.3) +1 more potentially affected by CVE-2026-27982 via django-allauth (0.34.0)

django-allauth PYPI version 0.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - dj-core-drf 0.1.0 - django-zero =0.0.1, =0.0.3 - openwisp-users 0.1.7 Source cves: CVE-2026-27982 Source advisory: OSV:PYSEC-2026-5...

dj-core-drf (>=0.0.4, <=0.0.8), openwisp-users (>=0.1.5, <=0.1.6) +1 more potentially affected by CVE-2026-27982 via django-allauth (0.33.0)

django-allauth PYPI version 0.33.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - dj-core-drf =0.0.4, =0.1.5, =0.0.6, =0.0.12 Source cves: CVE-2026-27982 Source advisory: OSV:PYSEC-2026-56...

dj-core-drf (>=0.0.1, <=0.0.3), openwisp-users (0.1.4) potentially affected by CVE-2026-27982 via django-allauth (0.32.0)

django-allauth PYPI version 0.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - dj-core-drf =0.0.1, =0.0.3 - openwisp-users 0.1.4 Source cves: CVE-2026-27982 Source advisory: OSV:PYSEC-2026-56...

dj-core-drf (0.1.0), django-zero (>=0.0.1, <=0.0.3) +1 more potentially affected by CVE-2025-65430 via django-allauth (0.34.0)

django-allauth PYPI version 0.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - dj-core-drf 0.1.0 - django-zero =0.0.1, =0.0.3 - openwisp-users 0.1.7 Source cves: CVE-2025-65430 Source advisory:...

dj-core-drf (0.1.0), django-zero (>=0.0.1, <=0.0.3) +1 more potentially affected by CVE-2025-65431 via django-allauth (0.34.0)

django-allauth PYPI version 0.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - dj-core-drf 0.1.0 - django-zero =0.0.1, =0.0.3 - openwisp-users 0.1.7 Source cves: CVE-2025-65431 Source advisory:...

dj-core-drf (>=0.0.4, <=0.0.8), openwisp-users (>=0.1.5, <=0.1.6) +1 more potentially affected by CVE-2025-65431 via django-allauth (0.33.0)

django-allauth PYPI version 0.33.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - dj-core-drf =0.0.4, =0.1.5, =0.0.6, =0.0.12 Source cves: CVE-2025-65431 Source advisory: OSV:GHSA-8M3C-C723-H4P4...

dj-core-drf (>=0.0.1, <=0.0.3), openwisp-users (0.1.4) potentially affected by CVE-2025-65431 via django-allauth (0.32.0)

django-allauth PYPI version 0.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - dj-core-drf =0.0.1, =0.0.3 - openwisp-users 0.1.4 Source cves: CVE-2025-65431 Source advisory: OSV:GHSA-8M3C-C723-H4P4...

dj-core-drf (>=0.0.4, <=0.0.8), openwisp-users (>=0.1.5, <=0.1.6) +1 more potentially affected by CVE-2025-65430 via django-allauth (0.33.0)

django-allauth PYPI version 0.33.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - dj-core-drf =0.0.4, =0.1.5, =0.0.6, =0.0.12 Source cves: CVE-2025-65430 Source advisory: OSV:GHSA-QHMC-3MVR-F2J4...

dj-core-drf (>=0.0.1, <=0.0.3), openwisp-users (0.1.4) potentially affected by CVE-2025-65430 via django-allauth (0.32.0)

django-allauth PYPI version 0.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - dj-core-drf =0.0.1, =0.0.3 - openwisp-users 0.1.4 Source cves: CVE-2025-65430 Source advisory: OSV:GHSA-QHMC-3MVR-F2J4...

dj-core-drf (>=0.0.1, <=0.0.3), openwisp-users (0.1.4) potentially affected by CVE-2025-65430 via django-allauth (0.32.0)

django-allauth PYPI version 0.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - dj-core-drf =0.0.1, =0.0.3 - openwisp-users 0.1.4 Source cves: CVE-2025-65430 Source advisory: OSV:PYSEC-2025-110...