dj-core-drf (>=0.0.1, <=0.0.3), openwisp-users (0.1.4) potentially affected by CVE-2025-65431 via django-allauth (0.32.0)

django-allauth PYPI version 0.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - dj-core-drf =0.0.1, =0.0.3 - openwisp-users 0.1.4 Source cves: CVE-2025-65431 Source advisory: OSV:PYSEC-2025-111...

dj-core-drf (0.1.0), django-zero (>=0.0.1, <=0.0.3) +1 more potentially affected by CVE-2025-65430 via django-allauth (0.34.0)

django-allauth PYPI version 0.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - dj-core-drf 0.1.0 - django-zero =0.0.1, =0.0.3 - openwisp-users 0.1.7 Source cves: CVE-2025-65430 Source advisory: OSV:PYSEC-2025-1...

dj-core-drf (>=0.0.4, <=0.0.8), openwisp-users (>=0.1.5, <=0.1.6) +1 more potentially affected by CVE-2025-65430 via django-allauth (0.33.0)

django-allauth PYPI version 0.33.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - dj-core-drf =0.0.4, =0.1.5, =0.0.6, =0.0.12 Source cves: CVE-2025-65430 Source advisory: OSV:PYSEC-2025-110...

dj-core-drf (>=0.0.4, <=0.0.8), openwisp-users (>=0.1.5, <=0.1.6) +1 more potentially affected by CVE-2025-65431 via django-allauth (0.33.0)

django-allauth PYPI version 0.33.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - dj-core-drf =0.0.4, =0.1.5, =0.0.6, =0.0.12 Source cves: CVE-2025-65431 Source advisory: OSV:PYSEC-2025-111...

cosmicdbsemantic (>=0.0.1, <=0.0.23), drf-account (0.0.1) +3 more potentially affected by CVE-2025-64459 via django (2.0.5)

django PYPI version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - cosmicdbsemantic =0.0.1, =0.9.2, =0.9.5 Source cves: CVE-2025-64459 Source advisory: OSV:GHSA-FRMV-PR5F-9MCR...

cosmicdbsemantic (>=0.0.1, <=0.0.23), drf-account (0.0.1) +3 more potentially affected by CVE-2025-64458 via django (2.0.5)

django PYPI version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - cosmicdbsemantic =0.0.1, =0.9.2, =0.9.5 Source cves: CVE-2025-64458 Source advisory: OSV:GHSA-QW25-V68C-QJF3...

django-rulengine (0.0.1), drf-httpsig (1.2.0) +2 more potentially affected by CVE-2025-64458 via django (1.7.0)

django PYPI version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-rulengine 0.0.1 - drf-httpsig 1.2.0 - tri-form 1.6.1 - tri-query 1.5.0 Source cves: CVE-2025-64458 Source advisory: OSV:GHSA-QW25-V68C-QJF3...

drf-tus (1.21.1), richie (0.1.0) potentially affected by CVE-2025-64458 via django (1.11.14)

django PYPI version 1.11.14 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - drf-tus 1.21.1 - richie 0.1.0 Source cves: CVE-2025-64458 Source advisory: OSV:GHSA-QW25-V68C-QJF3...

django-rulengine (0.0.1), drf-httpsig (1.2.0) +2 more potentially affected by CVE-2025-64459 via django (1.7.0)

django PYPI version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-rulengine 0.0.1 - drf-httpsig 1.2.0 - tri-form 1.6.1 - tri-query 1.5.0 Source cves: CVE-2025-64459 Source advisory: OSV:GHSA-FRMV-PR5F-9MCR...

django-oscar-moysklad (>=0.2.0, <=0.2.3), drf-paytm (0.0.1) +3 more potentially affected by CVE-2025-64458 via django (2.1.3)

django PYPI version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-oscar-moysklad =0.2.0, =1.4.3, =1.6.5 Source cves: CVE-2025-64458 Source advisory: OSV:GHSA-QW25-V68C-QJF3...

django-rstblog (>=0.1.0, <=0.1.1), drf-user (0.0.1) +2 more potentially affected by CVE-2025-64458 via django (2.0.7)

django PYPI version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-rstblog =0.1.0, =0.1.1 - drf-user 0.0.1 - drfaddons 0.0.3 - umap-project 1.0.0rc1 Source cves: CVE-2025-64458 Source advisory:...

django-oscar-moysklad (>=0.2.0, <=0.2.3), drf-paytm (0.0.1) +3 more potentially affected by CVE-2025-64459 via django (2.1.3)

django PYPI version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-oscar-moysklad =0.2.0, =1.4.3, =1.6.5 Source cves: CVE-2025-64459 Source advisory: OSV:GHSA-FRMV-PR5F-9MCR...

django-rstblog (>=0.1.0, <=0.1.1), drf-user (0.0.1) +2 more potentially affected by CVE-2025-64459 via django (2.0.7)

django PYPI version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-rstblog =0.1.0, =0.1.1 - drf-user 0.0.1 - drfaddons 0.0.3 - umap-project 1.0.0rc1 Source cves: CVE-2025-64459 Source advisory:...

EUVD-2020-0074

Malware in sbrugna...

drf-tus (1.21.1), richie (0.1.0) potentially affected by CVE-2025-57833 via django (1.11.14)

django PYPI version 1.11.14 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - drf-tus 1.21.1 - richie 0.1.0 Source cves: CVE-2025-57833 Source advisory: OSV:GHSA-6W2R-R2M5-XQ5W...

cosmicdbsemantic (>=0.0.1, <=0.0.23), drf-account (0.0.1) +3 more potentially affected by CVE-2025-57833 via django (2.0.5)

django PYPI version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - cosmicdbsemantic =0.0.1, =0.9.2, =0.9.5 Source cves: CVE-2025-57833 Source advisory: OSV:GHSA-6W2R-R2M5-XQ5W...

django-rulengine (0.0.1), drf-httpsig (1.2.0) +2 more potentially affected by CVE-2025-57833 via django (1.7.0)

django PYPI version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-rulengine 0.0.1 - drf-httpsig 1.2.0 - tri-form 1.6.1 - tri-query 1.5.0 Source cves: CVE-2025-57833 Source advisory: OSV:GHSA-6W2R-R2M5-XQ5W...

django-rstblog (>=0.1.0, <=0.1.1), drf-user (0.0.1) +2 more potentially affected by CVE-2025-57833 via django (2.0.7)

django PYPI version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-rstblog =0.1.0, =0.1.1 - drf-user 0.0.1 - drfaddons 0.0.3 - umap-project 1.0.0rc1 Source cves: CVE-2025-57833 Source advisory:...

drf-tus (1.21.1), richie (0.1.0) potentially affected by CVE-2025-48432 via django (1.11.14)

django PYPI version 1.11.14 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - drf-tus 1.21.1 - richie 0.1.0 Source cves: CVE-2025-48432 Source advisory: OSV:GHSA-7XR5-9HCQ-CHF9...

django-oscar-moysklad (>=0.2.0, <=0.2.3), drf-paytm (0.0.1) +3 more potentially affected by CVE-2025-48432 via django (2.1.3)

django PYPI version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-oscar-moysklad =0.2.0, =1.4.3, =1.6.5 Source cves: CVE-2025-48432 Source advisory: OSV:GHSA-7XR5-9HCQ-CHF9...