django-easy-login (>=0.1.0.dev0, <=0.1.0.dev2), nemo (>=1.14.2, <=1.14.3) potentially affected by CVE-2026-15307 via django (1.11.22)

django PYPI version 1.11.22 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-easy-login =0.1.0.dev0, =1.14.2, =1.14.3 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

aimmo (>=0.28.0b5241, <=0.61.8b52), cfl-common (>=3.1.4, <=4.14.2) +2 more potentially affected by CVE-2026-15307 via django (1.11.24)

django PYPI version 1.11.24 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aimmo =0.28.0b5241, =3.1.4, =2.19.0, =2.2.0, =2.4.12 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

aiida-core (1.0.0) potentially affected by CVE-2026-15307 via django (1.11.25)

django PYPI version 1.11.25 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aiida-core 1.0.0 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

gerapy (>=0.8.7, <=0.9.3a2), ora2 (2.4.4) potentially affected by CVE-2026-15307 via django (1.11.26)

django PYPI version 1.11.26 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - gerapy =0.8.7, =0.9.3a2 - ora2 2.4.4 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

adarnauth-esi (>=1.4.0, <=1.4.2), aldryn-django-cms (3.5.3.2) +296 more potentially affected by CVE-2026-15307 via django (1.11.29)

django PYPI version 1.11.29 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - adarnauth-esi =1.4.0, =3.0.4, =1.2.0, =1.7.0, =0.0.6, =1.0.0, =1.2.1, =0.1.2, =0.2.0, =0.3.2 and more Source cves: CVE-2026-15307 Source advisory:...

dj-saml-idp (>=1.1.0, <=1.2.1), django-conn-pool (1.11.1) +7 more potentially affected by CVE-2026-15307 via django (2.0.0rc1)

django PYPI version 2.0.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - dj-saml-idp =1.1.0, =4.3.1, =1.2.7, =0.0.3, =0.0.20, =0.1.0 - test-history-server 0.0.3 Source cves: CVE-2026-15307 Source advisory:...

cosmicdbsemantic (>=0.0.24, <=0.0.29), django-markdown-messaging (0.0.1) +3 more potentially affected by CVE-2026-15307 via django (2.0.6)

django PYPI version 2.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - cosmicdbsemantic =0.0.24, =0.0.4, =0.0.1, =0.0.1, =0.0.2 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

allianceauth (>=2.1.0b1, <=2.1.1), django-facebook-login (>=1.0.0, <=4.1.0) potentially affected by CVE-2026-15307 via django (2.0.8)

django PYPI version 2.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - allianceauth =2.1.0b1, =1.0.0, =4.1.0 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

beanstalk-dispatch (>=0.0.3, <=0.0.5), coderedcms (>=0.5.0, <=0.9.1) +96 more potentially affected by CVE-2026-15307 via django (2.0.13)

django PYPI version 2.0.13 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - beanstalk-dispatch =0.0.3, =0.5.0, =3.0.0.0b3, =2.1.0b0, =0.0.7, =0.1.0, =0.0.2, =1.3.0, =2.0.0, =1.0.2, =0.7.0, =0.8.7 and more Source cves:...

django-autoconfig (0.8.0) potentially affected by CVE-2026-15307 via django (2.1.0rc1)

django PYPI version 2.1.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-autoconfig 0.8.0 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

boorunaut (0.4.2), shipmnts-utils (>=0.0.1, <=0.0.4) +1 more potentially affected by CVE-2026-15307 via django (2.1.4)

django PYPI version 2.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - boorunaut 0.4.2 - shipmnts-utils =0.0.1, =0.0.4 - upload-manager 1.3.0 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

django-alexa (0.0.9), katka-core (>=0.5.0, <=0.8.0) +2 more potentially affected by CVE-2026-15307 via django (2.1.5)

django PYPI version 2.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-alexa 0.0.9 - katka-core =0.5.0, =1.0.0rc9, =1.0.0 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

burl (1.0.0), cegon-set1 (1.0.0) +7 more potentially affected by CVE-2026-15307 via django (2.1.7)

django PYPI version 2.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - burl 1.0.0 - cegon-set1 1.0.0 - cegon-set2 1.0.0 - django-inteliger =0.0.4, =0.3.0, =1.0.0, =6.5.3, =1.0.0b2, =1.0.0b3 - teste-marinonigrande 0.0.1...

docker-compose-control-center (3.1.0) potentially affected by CVE-2026-15307 via django (2.1.10)

django PYPI version 2.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - docker-compose-control-center 3.1.0 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

hubzoid (>=0.7.15, <=0.9.6), openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-87999 via open-webui (>=0.6.0, <=0.11.0)

open-webui PYPI version =0.6.0, =0.7.15, =0.9.6 - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-87999 Source advisory: OSV:PYSEC-2026-4116...

pdf2emb-nlp (0.1.3), pdf2embeddings (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-68770 via sentence-transformers (0.2.5.1)

sentence-transformers PYPI version 0.2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - pdf2emb-nlp 0.1.3 - pdf2embeddings =0.1.0, =0.1.1 Source cves: CVE-2026-68770 Source advisory: OSV:PYSEC-2026-4164...

contextualized-topic-models (>=1.4.3, <=1.5.0) potentially affected by CVE-2026-68770 via sentence-transformers (0.3.5.1)

sentence-transformers PYPI version 0.3.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - contextualized-topic-models =1.4.3, =1.5.0 Source cves: CVE-2026-68770 Source advisory: OSV:PYSEC-2026-4164...

awessome (>=0.0.1, <=0.0.14), bani (>=0.1.0, <=0.7.2) +3 more potentially affected by CVE-2026-68770 via sentence-transformers (0.3.8)

sentence-transformers PYPI version 0.3.8 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - awessome =0.0.1, =0.1.0, =0.0.2, =0.0.9 Source cves: CVE-2026-68770 Source advisory: OSV:PYSEC-2026-4164...

russian-paraphrasers (0.0.3) potentially affected by CVE-2026-68770 via sentence-transformers (0.4.0)

sentence-transformers PYPI version 0.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - russian-paraphrasers 0.0.3 Source cves: CVE-2026-68770 Source advisory: OSV:PYSEC-2026-4164...

hypertag (>=0.4.0, <=0.6.3.3.1), pororo (0.3.1) potentially affected by CVE-2026-68770 via sentence-transformers (0.4.1.2)

sentence-transformers PYPI version 0.4.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - hypertag =0.4.0, =0.6.3.3.1 - pororo 0.3.1 Source cves: CVE-2026-68770 Source advisory: OSV:PYSEC-2026-4164...