kiwitcms (10.1.0), nobinobi-core (0.1.4.1) +5 more potentially affected by CVE-2024-45231 via django (3.2.3)

django PYPI version 3.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - kiwitcms 10.1.0 - nobinobi-core 0.1.4.1 - nobinobi-staff 0.1.6.1 - xdj-datamap =0.0.1, =0.0.1, =0.0.3, =0.0.1, =0.0.6 Source cves: CVE-2024-45231...

Cross-site Scripting in kiwitcms

A stored XSS in a kiwi Test Plan can run malicious javascript which could be chained with an HTML injection to perform a UI redressing attack clickjacking and an HTML injection which disables the use of the history page...

Cross-site Scripting (XSS)

Overview kiwitcms is a Test Case Management System Affected versions of this package are vulnerable to Cross-site Scripting XSS via the extralink field in TestPlan and TestCase components. An attacker can inject and execute arbitrary JavaScript code by submitting specially crafted input to these...

Open Redirect

Overview kiwitcms is a Test Case Management System Affected versions of this package are vulnerable to Open Redirect via the next parameter in the account confirmation endpoint. An attacker can redirect users to arbitrary external domains by crafting a malicious URL, potentially facilitating...

Missing Authorization

Overview kiwitcms is a Test Case Management System Affected versions of this package are vulnerable to Missing Authorization in the /init-db/ process. An attacker can access administrative setup functionality by sending requests to this endpoint after initial use. This is only exploitable if the...

colorizexl (>=0.0.1, <=0.2.1), dstrace (>=0.1.5, <=0.1.11) +8 more potentially affected by unknown CVE via bleach (3.1.4)

bleach PYPI version 3.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on bleach and may be impacted: - colorizexl =0.0.1, =0.1.5, =1.1.7, =8.2.0, =0.0.2, =1.4.0, =0.0.6rc1, =0.3.2, =0.3.3 Source cves: unknown CVE Source advisory: OSV:GHSA-GJ48-438W-JH...

alcali (>=2018.3.2, <=2019.2.2), botbuilder-applicationinsights (>=4.7.0, <=4.14.2) +4 more potentially affected by CVE-2026-6873 via django (2.2.6)

django PYPI version 2.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - alcali =2018.3.2, =4.7.0, =4.10.0, =4.14.2 - kiwitcms 7.1.0 - ls-orb 0.1.0 - wazimap 2.1.0 Source cves: CVE-2026-6873 Source advisory:...

familiar (0.1.4), kiwitcms (>=8.1.0, <=8.1.99) potentially affected by CVE-2026-48587 via django (3.0.4)

django PYPI version 3.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - familiar 0.1.4 - kiwitcms =8.1.0, =8.1.99 Source cves: CVE-2026-48587 Source advisory: OSV:GHSA-923M-GV2P-W5QP...

familiar (0.1.4), kiwitcms (>=8.1.0, <=8.1.99) potentially affected by CVE-2026-6873 via django (3.0.4)

django PYPI version 3.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - familiar 0.1.4 - kiwitcms =8.1.0, =8.1.99 Source cves: CVE-2026-6873 Source advisory: OSV:GHSA-H7PC-VWP9-298G...

edc (>=0.1.47, <=0.1.72), kiwitcms (8.6.0) +3 more potentially affected by CVE-2026-48587 via django (3.0.9)

django PYPI version 3.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - edc =0.1.47, =0.0.1, =0.0.3 Source cves: CVE-2026-48587 Source advisory: OSV:GHSA-923M-GV2P-W5QP...

edc (>=0.1.47, <=0.1.72), kiwitcms (8.6.0) +3 more potentially affected by CVE-2026-6873 via django (3.0.9)

django PYPI version 3.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - edc =0.1.47, =0.0.1, =0.0.3 Source cves: CVE-2026-6873 Source advisory: OSV:GHSA-H7PC-VWP9-298G...

archivebox (>=0.5.0, <=0.5.4), ashley (1.0.0b3) +7 more potentially affected by CVE-2026-48587 via django (3.1.3)

django PYPI version 3.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - archivebox =0.5.0, =1.0.0, =1.0.0, =2.0.0a1, =2.1.1 Source cves: CVE-2026-48587 Source advisory: OSV:GHSA-923M-GV2P-W5QP...

ashley (1.0.0b4), hazard-feed (>=0.2.0, <=0.2.5) +1 more potentially affected by CVE-2026-6873 via django (3.1.4)

django PYPI version 3.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - ashley 1.0.0b4 - hazard-feed =0.2.0, =0.2.5 - kiwitcms 8.9.0 Source cves: CVE-2026-6873 Source advisory: OSV:GHSA-H7PC-VWP9-298G...

django-bloggy (1.0.0), kiwitcms (10.5.0) +2 more potentially affected by CVE-2026-48587 via django (3.2.9)

django PYPI version 3.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-bloggy 1.0.0 - kiwitcms 10.5.0 - mercarigetter =1.0.14, =1.0.0, =1.1.0 Source cves: CVE-2026-48587 Source advisory: OSV:GHSA-923M-GV2P-W5QP...

django-bloggy (1.0.0), kiwitcms (10.5.0) +2 more potentially affected by CVE-2026-6873 via django (3.2.9)

django PYPI version 3.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-bloggy 1.0.0 - kiwitcms 10.5.0 - mercarigetter =1.0.14, =1.0.0, =1.1.0 Source cves: CVE-2026-6873 Source advisory: OSV:GHSA-H7PC-VWP9-298G...

django-microservice-common (>=0.1.0, <=0.1.7), djangodjangodjango (4.0.7) +3 more potentially affected by CVE-2026-6873 via django (4.0.7)

django PYPI version 4.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-microservice-common =0.1.0, =11.4.0, =0.1.0, =0.1.3 - tesla-ce 1.0.0 Source cves: CVE-2026-6873 Source advisory: OSV:GHSA-H7PC-VWP9-298G...

djangodjangodjango (4.1.8), kiwitcms (12.2.0) potentially affected by CVE-2026-48587 via django (4.1.8)

django PYPI version 4.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - djangodjangodjango 4.1.8 - kiwitcms 12.2.0 Source cves: CVE-2026-48587 Source advisory: OSV:GHSA-923M-GV2P-W5QP...

djangodjangodjango (4.1.8), kiwitcms (12.2.0) potentially affected by CVE-2026-6873 via django (4.1.8)

django PYPI version 4.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - djangodjangodjango 4.1.8 - kiwitcms 12.2.0 Source cves: CVE-2026-6873 Source advisory: OSV:GHSA-H7PC-VWP9-298G...

kiwitcms (10.1.0), nobinobi-core (0.1.4.1) +5 more potentially affected by CVE-2026-48587 via django (3.2.3)

django PYPI version 3.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - kiwitcms 10.1.0 - nobinobi-core 0.1.4.1 - nobinobi-staff 0.1.6.1 - xdj-datamap =0.0.1, =0.0.1, =0.0.3, =0.0.1, =0.0.6 Source cves: CVE-2026-48587...

kiwitcms (10.1.0), nobinobi-core (0.1.4.1) +5 more potentially affected by CVE-2026-6873 via django (3.2.3)

django PYPI version 3.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - kiwitcms 10.1.0 - nobinobi-core 0.1.4.1 - nobinobi-staff 0.1.6.1 - xdj-datamap =0.0.1, =0.0.1, =0.0.3, =0.0.1, =0.0.6 Source cves: CVE-2026-6873...