CVE-2021-40514

CVE-2021-40514 OSCAR McMaster 19.401235 Stored Cross Site Scripting Vulnerability A stored Cross Site Scripting vulnerability exists in multiple pages in version 19.401235 of the OSCAR McMaster application that allows for arbitrary execution of JavaScript commands. Placeholder for CVE mitre...

CVE-2021-40512

CVE-2021-40512 OSCAR McMaster 19.401235 SQL Injection Vulnerability A SQL injection vulnerability exists in version 19.401235 of OSCAR McMaster. A malicious attacker can issue SQL commands to the MySQL/MariaDB database through the vulnerable sendTo parameter located on the...

CVE-2021-40513

CVE-2021-40513 OSCAR McMaster 19.401235 Reflected Cross Site Scripting Vulnerability A reflected Cross Site Scripting vulnerability exists in multiple pages in version 19.401235 of the OSCAR McMaster application that allows for arbitrary execution of JavaScript commands. Placeholder for CVE mitre...

django-oscar-moysklad (>=0.2.0, <=0.2.3), drf-paytm (0.0.1) +3 more potentially affected by CVE-2026-15307 via django (2.1.3)

django PYPI version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-oscar-moysklad =0.2.0, =1.4.3, =1.6.5 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

autogenerated-api (1.1.9), django-oscar-moysklad (>=0.2.4, <=0.2.5) +2 more potentially affected by CVE-2026-15307 via django (1.11.18)

django PYPI version 1.11.18 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - autogenerated-api 1.1.9 - django-oscar-moysklad =0.2.4, =1.0.0b0, =1.0.0b1 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

django-cms-qe (1.4.3), django-oscar-moysklad (>=0.2.4, <=0.2.5) +1 more potentially affected by CVE-2026-54625 via django-cms (3.5.2)

django-cms PYPI version 3.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on django-cms and may be impacted: - django-cms-qe 1.4.3 - django-oscar-moysklad =0.2.4, =0.2.5 - richie 0.1.0 Source cves: CVE-2026-54625 Source advisory: OSV:PYSEC-2026-3824...

django-cms-qe (1.4.3), django-oscar-moysklad (>=0.2.4, <=0.2.5) +1 more potentially affected by CVE-2026-54623 via django-cms (3.5.2)

django-cms PYPI version 3.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on django-cms and may be impacted: - django-cms-qe 1.4.3 - django-oscar-moysklad =0.2.4, =0.2.5 - richie 0.1.0 Source cves: CVE-2026-54623 Source advisory: OSV:PYSEC-2026-3822...

django-cms-qe (1.4.3), django-oscar-moysklad (>=0.2.4, <=0.2.5) +1 more potentially affected by CVE-2026-63003 via django-cms (3.5.2)

django-cms PYPI version 3.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on django-cms and may be impacted: - django-cms-qe 1.4.3 - django-oscar-moysklad =0.2.4, =0.2.5 - richie 0.1.0 Source cves: CVE-2026-63003 Source advisory: OSV:PYSEC-2026-3821...

django-cms-qe (1.4.3), django-oscar-moysklad (>=0.2.4, <=0.2.5) +1 more potentially affected by CVE-2026-61663 via django-cms (3.5.2)

django-cms PYPI version 3.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on django-cms and may be impacted: - django-cms-qe 1.4.3 - django-oscar-moysklad =0.2.4, =0.2.5 - richie 0.1.0 Source cves: CVE-2026-61663 Source advisory: OSV:PYSEC-2026-3823...

django-oscar-wagtail (0.0.5) potentially affected by CVE-2026-55468 via wagtail (1.6.0rc1)

wagtail PYPI version 1.6.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - django-oscar-wagtail 0.0.5 Source cves: CVE-2026-55468 Source advisory: OSV:PYSEC-2026-3939...

Malicious Package

Overview oscar-redis is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

Malicious code in oscar-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c988ef2dab3264cefcab98e4aae196d6c45b5555b22641e5862d89bde83815b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16035 Malicious code in oscar-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c988ef2dab3264cefcab98e4aae196d6c45b5555b22641e5862d89bde83815b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

django-cms-qe (1.4.3), django-oscar-moysklad (>=0.2.4, <=0.2.5) +1 more potentially affected by CVE-2026-54623 via django-cms (3.5.2)

django-cms PYPI version 3.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on django-cms and may be impacted: - django-cms-qe 1.4.3 - django-oscar-moysklad =0.2.4, =0.2.5 - richie 0.1.0 Source cves: CVE-2026-54623 Source advisory: OSV:GHSA-8JJ7-4V57-FR...

django-oscar-wagtail (0.0.5) potentially affected by unknown CVE via wagtail (1.6.0rc1)

wagtail PYPI version 1.6.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - django-oscar-wagtail 0.0.5 Source cves: unknown CVE Source advisory: OSV:GHSA-JM5P-837G-RV8G...

django-oscar-wagtail (0.0.5) potentially affected by unknown CVE via wagtail (1.6.0rc1)

wagtail PYPI version 1.6.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - django-oscar-wagtail 0.0.5 Source cves: unknown CVE Source advisory: OSV:GHSA-X5CX-W6P2-MXF2...

django-oscar-wagtail (0.0.5) potentially affected by unknown CVE via wagtail (1.6.0rc1)

wagtail PYPI version 1.6.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - django-oscar-wagtail 0.0.5 Source cves: unknown CVE Source advisory: OSV:GHSA-C2XX-CJMH-9Q8F...

django-oscar-wagtail (0.0.5) potentially affected by unknown CVE via wagtail (1.6.0rc1)

wagtail PYPI version 1.6.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - django-oscar-wagtail 0.0.5 Source cves: unknown CVE Source advisory: OSV:GHSA-92HV-J533-69WC...

django-cms-qe (1.4.3), django-oscar-moysklad (>=0.2.4, <=0.2.5) +1 more potentially affected by CVE-2026-61663 via django-cms (3.5.2)

django-cms PYPI version 3.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on django-cms and may be impacted: - django-cms-qe 1.4.3 - django-oscar-moysklad =0.2.4, =0.2.5 - richie 0.1.0 Source cves: CVE-2026-61663 Source advisory: OSV:GHSA-8QJ2-C6Q4-F3...

django-cms-qe (1.4.3), django-oscar-moysklad (>=0.2.4, <=0.2.5) +1 more potentially affected by CVE-2026-63003 via django-cms (3.5.2)

django-cms PYPI version 3.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on django-cms and may be impacted: - django-cms-qe 1.4.3 - django-oscar-moysklad =0.2.4, =0.2.5 - richie 0.1.0 Source cves: CVE-2026-63003 Source advisory: OSV:GHSA-6X92-6VX4-5F...