Open edX <2022-06-06 - Cross-Site Scripting

Open edX before 2022-06-06 contains a reflected cross-site scripting vulnerability via the 'next' parameter in the logout URL. id: CVE-2022-32195 info: name: Open edX 2022-06-06 - Cross-Site Scripting author: arafatansari severity: medium description: | Open edX before 2022-06-06 contains a...

adyanutils (>=0.4.2, <=0.8.6), batch-automation (0.0.3) +5 more potentially affected by CVE-2026-96749 via pymongo (3.6.0)

pymongo PYPI version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - adyanutils =0.4.2, =0.55.5, =0.62.0 - hanita 0.1.3 - jetengine 0.1.3 - scout-browser 4.1.0 - yy-spider 1.0.0 Source cves: CVE-2026-96749 Source...

edx-enterprise (>=0.40.6, <=0.42.0) potentially affected by CVE-2026-96749 via pymongo (3.5.0)

pymongo PYPI version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - edx-enterprise =0.40.6, =0.42.0 Source cves: CVE-2026-96749 Source advisory: OSV:PYSEC-2026-4296...

adyanutils (>=0.4.2, <=0.8.6), batch-automation (0.0.3) +5 more potentially affected by CVE-2026-88029 via pymongo (3.6.0)

pymongo PYPI version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - adyanutils =0.4.2, =0.55.5, =0.62.0 - hanita 0.1.3 - jetengine 0.1.3 - scout-browser 4.1.0 - yy-spider 1.0.0 Source cves: CVE-2026-88029 Source...

edx-enterprise (>=0.40.6, <=0.42.0) potentially affected by CVE-2026-88029 via pymongo (3.5.0)

pymongo PYPI version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - edx-enterprise =0.40.6, =0.42.0 Source cves: CVE-2026-88029 Source advisory: OSV:PYSEC-2026-4294...

adyanutils (>=0.4.2, <=0.8.6), batch-automation (0.0.3) +5 more potentially affected by CVE-2026-96749 via pymongo (3.6.0)

pymongo PYPI version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - adyanutils =0.4.2, =0.55.5, =0.62.0 - hanita 0.1.3 - jetengine 0.1.3 - scout-browser 4.1.0 - yy-spider 1.0.0 Source cves: CVE-2026-96749 Source...

edx-enterprise (>=0.40.6, <=0.42.0) potentially affected by CVE-2026-96749 via pymongo (3.5.0)

pymongo PYPI version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - edx-enterprise =0.40.6, =0.42.0 Source cves: CVE-2026-96749 Source advisory: OSV:GHSA-V4X9-3549-CRWV...

adyanutils (>=0.4.2, <=0.8.6), batch-automation (0.0.3) +5 more potentially affected by CVE-2026-88029 via pymongo (3.6.0)

pymongo PYPI version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - adyanutils =0.4.2, =0.55.5, =0.62.0 - hanita 0.1.3 - jetengine 0.1.3 - scout-browser 4.1.0 - yy-spider 1.0.0 Source cves: CVE-2026-88029 Source...

edx-enterprise (>=0.40.6, <=0.42.0) potentially affected by CVE-2026-88029 via pymongo (3.5.0)

pymongo PYPI version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - edx-enterprise =0.40.6, =0.42.0 Source cves: CVE-2026-88029 Source advisory: OSV:GHSA-8FVV-FGR5-F8CH...

edx-oauth2-wordpress-backend (>=1.0.0, <=1.0.4), richie (>=2.13.0, <=2.14.1) +2 more potentially affected by CVE-2026-57176 via social-auth-core (4.2.0)

social-auth-core PYPI version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - edx-oauth2-wordpress-backend =1.0.0, =2.13.0, =14.0.0, =4.11.0, =4.12.2 Source cves: CVE-2026-57176 Source advisory:...

edx-auth-backends (>=1.0.1, <=2.0.2), pixelcms-server (>=0.4.1, <=0.4.2) +5 more potentially affected by CVE-2026-57176 via social-auth-core (1.7.0)

social-auth-core PYPI version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - edx-auth-backends =1.0.1, =0.4.1, =1.2.0, =0.0.2, =0.2.0, =0.8.3, =1.0.0rc8 Source cves: CVE-2026-57176 Source advisory:...

edx-auth-backends (>=1.0.1, <=2.0.2), pixelcms-server (>=0.4.1, <=0.4.2) +5 more potentially affected by CVE-2026-57179 via social-auth-core (1.7.0)

social-auth-core PYPI version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - edx-auth-backends =1.0.1, =0.4.1, =1.2.0, =0.0.2, =0.2.0, =0.8.3, =1.0.0rc8 Source cves: CVE-2026-57179 Source advisory:...

edx-auth-backends (>=1.0.1, <=2.0.2), pixelcms-server (>=0.4.1, <=0.4.2) +5 more potentially affected by CVE-2026-57178 via social-auth-core (1.7.0)

social-auth-core PYPI version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - edx-auth-backends =1.0.1, =0.4.1, =1.2.0, =0.0.2, =0.2.0, =0.8.3, =1.0.0rc8 Source cves: CVE-2026-57178 Source advisory:...

edx-oauth2-wordpress-backend (>=1.0.0, <=1.0.4), richie (>=2.13.0, <=2.14.1) +2 more potentially affected by CVE-2026-57175 via social-auth-core (4.2.0)

social-auth-core PYPI version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - edx-oauth2-wordpress-backend =1.0.0, =2.13.0, =14.0.0, =4.11.0, =4.12.2 Source cves: CVE-2026-57175 Source advisory:...

edx-auth-backends (>=1.0.1, <=2.0.2), pixelcms-server (>=0.4.1, <=0.4.2) +5 more potentially affected by CVE-2026-57175 via social-auth-core (1.7.0)

social-auth-core PYPI version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - edx-auth-backends =1.0.1, =0.4.1, =1.2.0, =0.0.2, =0.2.0, =0.8.3, =1.0.0rc8 Source cves: CVE-2026-57175 Source advisory:...

django-auth0-user (>=0.15.0, <=0.16.5), django-rest-social-email-allauth (0.1.0) +6 more potentially affected by CVE-2026-57175 via social-auth-core (3.4.0)

social-auth-core PYPI version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - django-auth0-user =0.15.0, =3.0.0, =4.4.0a1, =0.2.0, =2.0.0, =0.0.5, =1.0.2 - social-auth-mitxpro 0.1.0 Source cves:...

edx-oauth2-wordpress-backend (>=1.0.0, <=1.0.4), richie (>=2.13.0, <=2.14.1) +2 more potentially affected by CVE-2026-57179 via social-auth-core (4.2.0)

social-auth-core PYPI version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - edx-oauth2-wordpress-backend =1.0.0, =2.13.0, =14.0.0, =4.11.0, =4.12.2 Source cves: CVE-2026-57179 Source advisory:...

django-auth0-user (>=0.15.0, <=0.16.5), django-rest-social-email-allauth (0.1.0) +6 more potentially affected by CVE-2026-57176 via social-auth-core (3.4.0)

social-auth-core PYPI version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - django-auth0-user =0.15.0, =3.0.0, =4.4.0a1, =0.2.0, =2.0.0, =0.0.5, =1.0.2 - social-auth-mitxpro 0.1.0 Source cves:...

django-auth0-user (>=0.15.0, <=0.16.5), django-rest-social-email-allauth (0.1.0) +6 more potentially affected by CVE-2026-57178 via social-auth-core (3.4.0)

social-auth-core PYPI version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - django-auth0-user =0.15.0, =3.0.0, =4.4.0a1, =0.2.0, =2.0.0, =0.0.5, =1.0.2 - social-auth-mitxpro 0.1.0 Source cves:...

edx-auth-backends (>=1.0.1, <=2.0.2), pixelcms-server (>=0.4.1, <=0.4.2) +5 more potentially affected by CVE-2026-57177 via social-auth-core (1.7.0)

social-auth-core PYPI version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - edx-auth-backends =1.0.1, =0.4.1, =1.2.0, =0.0.2, =0.2.0, =0.8.3, =1.0.0rc8 Source cves: CVE-2026-57177 Source advisory:...