django-magnificent-messages (>=0.1.2, <=0.1.4), fiduswriter (3.7.0rc4) +5 more potentially affected by CVE-2026-15307 via django (2.2.4)

django PYPI version 2.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-magnificent-messages =0.1.2, =0.0.0, =0.9.6, =0.9.16, =0.9.17 Source cves: CVE-2026-15307 Source advisory: OSV:GHSA-WVQV-FJ8W-QMHM...

CVE-2026-25130: Improper Neutralization of Special Elements used in an OS Command

Cybersecurity AI CAI is a framework for AI Security. In versions up to and including 0.5.10, the CAI Cybersecurity AI framework contains multiple argument injection vulnerabilities in its function tools. User-controlled input is passed directly to shell commands via subprocess.Popen with...

django-magnificent-messages (>=0.1.2, <=0.1.4), fiduswriter (3.7.0rc4) +5 more potentially affected by CVE-2025-64458 via django (2.2.4)

django PYPI version 2.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-magnificent-messages =0.1.2, =0.0.0, =0.9.6, =0.9.16, =0.9.17 Source cves: CVE-2025-64458 Source advisory: OSV:GHSA-QW25-V68C-QJF3...