34879 matches found
django-rstblog (>=0.1.0, <=0.1.1), drf-user (0.0.1) +2 more potentially affected by CVE-2026-15307 via django (2.0.7)
django PYPI version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-rstblog =0.1.0, =0.1.1 - drf-user 0.0.1 - drfaddons 0.0.3 - umap-project 1.0.0rc1 Source cves: CVE-2026-15307 Source advisory:...
django-rest-authemail (>=1.7.9, <=2.0.0), umap-project (>=1.0.0rc2, <=1.0.0rc6) +1 more potentially affected by CVE-2026-15307 via django (2.1.1)
django PYPI version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-rest-authemail =1.7.9, =1.0.0rc2, =0.1.0, =0.2.0.dev2 Source cves: CVE-2026-15307 Source advisory: OSV:GHSA-WVQV-FJ8W-QMHM...
seed-auth-api (>=0.9.0, <=0.9.2), umap-project (>=0.8.0, <=0.8.3) potentially affected by CVE-2026-15307 via django (1.10.5)
django PYPI version 1.10.5 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - seed-auth-api =0.9.0, =0.8.0, =0.8.3 Source cves: CVE-2026-15307 Source advisory: OSV:GHSA-WVQV-FJ8W-QMHM...
django-rest-authemail (>=1.7.9, <=2.0.0), umap-project (>=1.0.0rc2, <=1.0.0rc6) +1 more potentially affected by CVE-2026-15830 via django (2.1.1)
django PYPI version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-rest-authemail =1.7.9, =1.0.0rc2, =0.1.0, =0.2.0.dev2 Source cves: CVE-2026-15830 Source advisory: OSV:GHSA-Q238-5CXM-5C9H...
caluma (>=5.4.0, <=5.5.2), django-cms-forms (>=0.0.1, <=0.0.11) +2 more potentially affected by CVE-2026-15307 via django (2.2.11)
django PYPI version 2.2.11 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - caluma =5.4.0, =0.0.1, =0.3.10.56, =1.2.0, =1.2.2 Source cves: CVE-2026-15307 Source advisory: OSV:GHSA-WVQV-FJ8W-QMHM...
django-rstblog (>=0.1.0, <=0.1.1), drf-user (0.0.1) +2 more potentially affected by CVE-2026-15830 via django (2.0.7)
django PYPI version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-rstblog =0.1.0, =0.1.1 - drf-user 0.0.1 - drfaddons 0.0.3 - umap-project 1.0.0rc1 Source cves: CVE-2026-15830 Source advisory:...
django-alexa (0.0.9), katka-core (>=0.5.0, <=0.8.0) +2 more potentially affected by CVE-2026-15307 via django (2.1.5)
django PYPI version 2.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-alexa 0.0.9 - katka-core =0.5.0, =1.0.0rc9, =1.0.0 Source cves: CVE-2026-15307 Source advisory: OSV:GHSA-WVQV-FJ8W-QMHM...
CVE-2026-47763
pdm is a Python package and dependency manager supporting the latest PEP standards. In versions prior to 2.27.0, pdm writes several project-local state or configuration files without symlink protection. If a malicious repository places those files as symlinks, local PDM operations can overwrite t...
UBUNTU-CVE-2026-47763
pdm is a Python package and dependency manager supporting the latest PEP standards. In versions prior to 2.27.0, pdm writes several project-local state or configuration files without symlink protection. If a malicious repository places those files as symlinks, local PDM operations can overwrite t...
CVE-2026-47763 pdm: Project-Local State and Config Writes Follow Symlinks
pdm is a Python package and dependency manager supporting the latest PEP standards. In versions prior to 2.27.0, pdm writes several project-local state or configuration files without symlink protection. If a malicious repository places those files as symlinks, local PDM operations can overwrite t...
CVE-2026-47763
pdm is a Python package and dependency manager supporting the latest PEP standards. In versions prior to 2.27.0, pdm writes several project-local state or configuration files without symlink protection. If a malicious repository places those files as symlinks, local PDM operations can overwrite t...
EUVD-2026-52807
pdm is a Python package and dependency manager supporting the latest PEP standards. In versions prior to 2.27.0, pdm writes several project-local state or configuration files without symlink protection. If a malicious repository places those files as symlinks, local PDM operations can overwrite t...
CVE-2026-47763 pdm: Project-Local State and Config Writes Follow Symlinks
pdm is a Python package and dependency manager supporting the latest PEP standards. In versions prior to 2.27.0, pdm writes several project-local state or configuration files without symlink protection. If a malicious repository places those files as symlinks, local PDM operations can overwrite t...
CVE-2026-47763
CVE-2026-47763 affects the Python package manager pdm . In versions prior to 2.27.0, pdm writes several project-local state/config files without symlink protection. If a malicious repository places those files as symlinks, local PDM operations can overwrite the symlink targets, creating an arbitr...
CVE-2026-47763 pdm: Project-Local State and Config Writes Follow Symlinks
pdm is a Python package and dependency manager supporting the latest PEP standards. In versions prior to 2.27.0, pdm writes several project-local state or configuration files without symlink protection. If a malicious repository places those files as symlinks, local PDM operations can overwrite t...
seed-auth-api (>=0.9.0, <=0.9.2), umap-project (>=0.8.0, <=0.8.3) potentially affected by CVE-2026-15830 via django (1.10.5)
django PYPI version 1.10.5 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - seed-auth-api =0.9.0, =0.8.0, =0.8.3 Source cves: CVE-2026-15830 Source advisory: OSV:PYSEC-2026-3717...
django-rest-authemail (>=1.7.9, <=2.0.0), umap-project (>=1.0.0rc2, <=1.0.0rc6) +1 more potentially affected by CVE-2026-15830 via django (2.1.1)
django PYPI version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-rest-authemail =1.7.9, =1.0.0rc2, =0.1.0, =0.2.0.dev2 Source cves: CVE-2026-15830 Source advisory: OSV:PYSEC-2026-3717...
caluma (>=5.4.0, <=5.5.2), django-cms-forms (>=0.0.1, <=0.0.11) +2 more potentially affected by CVE-2026-15830 via django (2.2.11)
django PYPI version 2.2.11 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - caluma =5.4.0, =0.0.1, =0.3.10.56, =1.2.0, =1.2.2 Source cves: CVE-2026-15830 Source advisory: OSV:PYSEC-2026-3717...
django-rstblog (>=0.1.0, <=0.1.1), drf-user (0.0.1) +2 more potentially affected by CVE-2026-15830 via django (2.0.7)
django PYPI version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-rstblog =0.1.0, =0.1.1 - drf-user 0.0.1 - drfaddons 0.0.3 - umap-project 1.0.0rc1 Source cves: CVE-2026-15830 Source advisory:...
CVE-2026-16068 Brizy - Page Builder < 2.8.19 - Author+ Stored XSS via brizy_set_project Global Project Code Asset
The Brizy WordPress plugin before 2.8.19 does not properly restrict who can modify its site-global design data and does not sanitise part of that data before outputting it, allowing authenticated users with Author-level access and above to store arbitrary JavaScript that is then served unsanitise...