mycms (>=0.1.9, <=0.1.12) potentially affected by CVE-2026-57175 via social-auth-core (3.3.3)

social-auth-core PYPI version 3.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - mycms =0.1.9, =0.1.12 Source cves: CVE-2026-57175 Source advisory: OSV:PYSEC-2026-4167...

mycms (>=0.1.9, <=0.1.12) potentially affected by CVE-2026-57178 via social-auth-core (3.3.3)

social-auth-core PYPI version 3.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - mycms =0.1.9, =0.1.12 Source cves: CVE-2026-57178 Source advisory: OSV:PYSEC-2026-4165...

mycms (>=0.1.9, <=0.1.12) potentially affected by CVE-2026-57179 via social-auth-core (3.3.3)

social-auth-core PYPI version 3.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - mycms =0.1.9, =0.1.12 Source cves: CVE-2026-57179 Source advisory: OSV:GHSA-VQG6-3FW6-J9JG...

mycms (>=0.1.9, <=0.1.12) potentially affected by CVE-2026-57178 via social-auth-core (3.3.3)

social-auth-core PYPI version 3.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - mycms =0.1.9, =0.1.12 Source cves: CVE-2026-57178 Source advisory: OSV:GHSA-3C93-F73F-QC9H...

mycms (>=0.1.9, <=0.1.12) potentially affected by CVE-2026-57177 via social-auth-core (3.3.3)

social-auth-core PYPI version 3.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - mycms =0.1.9, =0.1.12 Source cves: CVE-2026-57177 Source advisory: OSV:GHSA-X7QQ-23VW-7PFG...

mycms (>=0.1.9, <=0.1.12) potentially affected by CVE-2026-57176 via social-auth-core (3.3.3)

social-auth-core PYPI version 3.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - mycms =0.1.9, =0.1.12 Source cves: CVE-2026-57176 Source advisory: OSV:GHSA-FP7W-M676-W7GC...

mycms (>=0.1.9, <=0.1.12) potentially affected by CVE-2026-57175 via social-auth-core (3.3.3)

social-auth-core PYPI version 3.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - mycms =0.1.9, =0.1.12 Source cves: CVE-2026-57175 Source advisory: OSV:GHSA-VQ6G-G6C7-5F2J...

caluma (>=6.0.0, <=6.3.1), mycms (>=0.1.9, <=0.1.12) +1 more potentially affected by CVE-2026-15830 via django (2.2.14)

django PYPI version 2.2.14 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - caluma =6.0.0, =0.1.9, =0.1.12 - x-net-django-color-field 1.0.0 Source cves: CVE-2026-15830 Source advisory: OSV:GHSA-Q238-5CXM-5C9H...

caluma (>=6.0.0, <=6.3.1), mycms (>=0.1.9, <=0.1.12) +1 more potentially affected by CVE-2026-15830 via django (2.2.14)

django PYPI version 2.2.14 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - caluma =6.0.0, =0.1.9, =0.1.12 - x-net-django-color-field 1.0.0 Source cves: CVE-2026-15830 Source advisory: OSV:PYSEC-2026-3717...

ci-buildbot (>=0.4.0, <=0.11.5), molecule (>=3.0.5, <=3.1.5) +2 more potentially affected by CVE-2026-54552 via sh (1.13.1)

sh PYPI version 1.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on sh and may be impacted: - ci-buildbot =0.4.0, =3.0.5, =0.0.0.dev0, =0.1.9, =0.1.12 Source cves: CVE-2026-54552 Source advisory: OSV:GHSA-Q38V-WP89-2W55...

caluma (>=6.0.0, <=6.3.1), mycms (>=0.1.9, <=0.1.12) +1 more potentially affected by CVE-2026-48588 via django (2.2.14)

django PYPI version 2.2.14 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - caluma =6.0.0, =0.1.9, =0.1.12 - x-net-django-color-field 1.0.0 Source cves: CVE-2026-48588 Source advisory: OSV:GHSA-3H9F-R86X-QVJX...

caluma (>=6.0.0, <=6.3.1), mycms (>=0.1.9, <=0.1.12) +1 more potentially affected by CVE-2026-53878 via django (2.2.14)

django PYPI version 2.2.14 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - caluma =6.0.0, =0.1.9, =0.1.12 - x-net-django-color-field 1.0.0 Source cves: CVE-2026-53878 Source advisory: OSV:GHSA-8QCX-XF44-272X...

caluma (>=6.0.0, <=6.3.1), mycms (>=0.1.9, <=0.1.12) +1 more potentially affected by CVE-2026-53877 via django (2.2.14)

django PYPI version 2.2.14 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - caluma =6.0.0, =0.1.9, =0.1.12 - x-net-django-color-field 1.0.0 Source cves: CVE-2026-53877 Source advisory: OSV:GHSA-CRHF-3PFG-W68W...

caluma (>=6.0.0, <=6.3.1), mycms (>=0.1.9, <=0.1.12) +1 more potentially affected by CVE-2026-8404 via django (2.2.14)

django PYPI version 2.2.14 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - caluma =6.0.0, =0.1.9, =0.1.12 - x-net-django-color-field 1.0.0 Source cves: CVE-2026-8404 Source advisory: OSV:GHSA-8CJM-8MP7-R2XF...

caluma (>=6.0.0, <=6.3.1), mycms (>=0.1.9, <=0.1.12) +1 more potentially affected by CVE-2026-48587 via django (2.2.14)

django PYPI version 2.2.14 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - caluma =6.0.0, =0.1.9, =0.1.12 - x-net-django-color-field 1.0.0 Source cves: CVE-2026-48587 Source advisory: OSV:GHSA-923M-GV2P-W5QP...

EUVD-2007-3570

Malware in sbrugna...

EUVD-2007-3569

Malware in sbrugna...

EUVD-2007-3571

Malware in sbrugna...

EUVD-2022-52149

Malicious code in bioql PyPI...

CVE-2022-4892

A vulnerability was found in MyCMS. It has been classified as problematic. This affects the function buildview of the file lib/gener/view.php of the component Visitors Module. The manipulation of the argument original/converted leads to cross site scripting. It is possible to initiate the attack...