galaxy (>=25.1.0, <=25.1.2), galaxy-ng (>=4.8.0, <=4.9.2) +6 more potentially affected by CVE-2026-57175 via social-auth-core (4.7.0)

social-auth-core PYPI version 4.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - galaxy =25.1.0, =4.8.0, =0.9.0, =1.40.0, =1.111.0, =1.2.6, =4.16.3, =5.5.5 - weblate-fedora-messaging 0.6.0 Source cves:...

galaxy (>=25.1.0, <=25.1.2), galaxy-ng (>=4.8.0, <=4.9.2) +6 more potentially affected by CVE-2026-57179 via social-auth-core (4.7.0)

social-auth-core PYPI version 4.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - galaxy =25.1.0, =4.8.0, =0.9.0, =1.40.0, =1.111.0, =1.2.6, =4.16.3, =5.5.5 - weblate-fedora-messaging 0.6.0 Source cves:...

galaxy (>=25.1.0, <=25.1.2), galaxy-ng (>=4.8.0, <=4.9.2) +6 more potentially affected by CVE-2026-57178 via social-auth-core (4.7.0)

social-auth-core PYPI version 4.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - galaxy =25.1.0, =4.8.0, =0.9.0, =1.40.0, =1.111.0, =1.2.6, =4.16.3, =5.5.5 - weblate-fedora-messaging 0.6.0 Source cves:...

galaxy (>=25.1.0, <=25.1.2), galaxy-ng (>=4.8.0, <=4.9.2) +6 more potentially affected by CVE-2026-57178 via social-auth-core (4.7.0)

social-auth-core PYPI version 4.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - galaxy =25.1.0, =4.8.0, =0.9.0, =1.40.0, =1.111.0, =1.2.6, =4.16.3, =5.5.5 - weblate-fedora-messaging 0.6.0 Source cves:...

galaxy (>=25.1.0, <=25.1.2), galaxy-ng (>=4.8.0, <=4.9.2) +6 more potentially affected by CVE-2026-57177 via social-auth-core (4.7.0)

social-auth-core PYPI version 4.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - galaxy =25.1.0, =4.8.0, =0.9.0, =1.40.0, =1.111.0, =1.2.6, =4.16.3, =5.5.5 - weblate-fedora-messaging 0.6.0 Source cves:...

galaxy (>=25.1.0, <=25.1.2), galaxy-ng (>=4.8.0, <=4.9.2) +6 more potentially affected by CVE-2026-57176 via social-auth-core (4.7.0)

social-auth-core PYPI version 4.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - galaxy =25.1.0, =4.8.0, =0.9.0, =1.40.0, =1.111.0, =1.2.6, =4.16.3, =5.5.5 - weblate-fedora-messaging 0.6.0 Source cves:...

galaxy (>=25.1.0, <=25.1.2), galaxy-ng (>=4.8.0, <=4.9.2) +6 more potentially affected by CVE-2026-57175 via social-auth-core (4.7.0)

social-auth-core PYPI version 4.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - galaxy =25.1.0, =4.8.0, =0.9.0, =1.40.0, =1.111.0, =1.2.6, =4.16.3, =5.5.5 - weblate-fedora-messaging 0.6.0 Source cves:...

doccano (>=1.8.2, <=1.8.3), emus-web (0.1.0) +6 more potentially affected by CVE-2026-27982 via django-allauth (0.50.0)

django-allauth PYPI version 0.50.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - doccano =1.8.2, =1.0.0b6, =1.40.0, =1.92.0, =0.1.6, =0.1.0, =0.11.12 Source cves: CVE-2026-27982 Source advisory:...

geonode (>=4.3.0, <=4.3.1), grooveshop-django-api (>=0.66.0, <=0.108.0) +2 more potentially affected by CVE-2026-27982 via django-allauth (0.61.1)

django-allauth PYPI version 0.61.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - geonode =4.3.0, =0.66.0, =1.62.0, =1.114.0, =1.137.0 Source cves: CVE-2026-27982 Source advisory: OSV:GHSA-2JPR-83RG-V67J...

doccano (>=1.8.2, <=1.8.3), emus-web (0.1.0) +6 more potentially affected by CVE-2026-27982 via django-allauth (0.50.0)

django-allauth PYPI version 0.50.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - doccano =1.8.2, =1.0.0b6, =1.40.0, =1.92.0, =0.1.6, =0.1.0, =0.11.12 Source cves: CVE-2026-27982 Source advisory: OSV:PYSEC-2026-56...

geonode (>=4.3.0, <=4.3.1), grooveshop-django-api (>=0.66.0, <=0.108.0) +2 more potentially affected by CVE-2026-27982 via django-allauth (0.61.1)

django-allauth PYPI version 0.61.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - geonode =4.3.0, =0.66.0, =1.62.0, =1.114.0, =1.137.0 Source cves: CVE-2026-27982 Source advisory: OSV:PYSEC-2026-56...

geonode (>=4.3.0, <=4.3.1), grooveshop-django-api (>=0.66.0, <=0.108.0) +2 more potentially affected by CVE-2025-65430 via django-allauth (0.61.1)

django-allauth PYPI version 0.61.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - geonode =4.3.0, =0.66.0, =1.62.0, =1.114.0, =1.137.0 Source cves: CVE-2025-65430 Source advisory: OSV:GHSA-QHMC-3MVR-F2J4...

doccano (>=1.8.2, <=1.8.3), emus-web (0.1.0) +6 more potentially affected by CVE-2025-65430 via django-allauth (0.50.0)

django-allauth PYPI version 0.50.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - doccano =1.8.2, =1.0.0b6, =1.40.0, =1.92.0, =0.1.6, =0.1.0, =0.11.12 Source cves: CVE-2025-65430 Source advisory:...

geonode (>=4.3.0, <=4.3.1), grooveshop-django-api (>=0.66.0, <=0.108.0) +2 more potentially affected by CVE-2025-65431 via django-allauth (0.61.1)

django-allauth PYPI version 0.61.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - geonode =4.3.0, =0.66.0, =1.62.0, =1.114.0, =1.137.0 Source cves: CVE-2025-65431 Source advisory: OSV:GHSA-8M3C-C723-H4P4...

doccano (>=1.8.2, <=1.8.3), emus-web (0.1.0) +6 more potentially affected by CVE-2025-65431 via django-allauth (0.50.0)

django-allauth PYPI version 0.50.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - doccano =1.8.2, =1.0.0b6, =1.40.0, =1.92.0, =0.1.6, =0.1.0, =0.11.12 Source cves: CVE-2025-65431 Source advisory:...

geonode (>=4.3.0, <=4.3.1), grooveshop-django-api (>=0.66.0, <=0.108.0) +2 more potentially affected by CVE-2025-65430 via django-allauth (0.61.1)

django-allauth PYPI version 0.61.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - geonode =4.3.0, =0.66.0, =1.62.0, =1.114.0, =1.137.0 Source cves: CVE-2025-65430 Source advisory: OSV:PYSEC-2025-110...

geonode (>=4.3.0, <=4.3.1), grooveshop-django-api (>=0.66.0, <=0.108.0) +2 more potentially affected by CVE-2025-65431 via django-allauth (0.61.1)

django-allauth PYPI version 0.61.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - geonode =4.3.0, =0.66.0, =1.62.0, =1.114.0, =1.137.0 Source cves: CVE-2025-65431 Source advisory: OSV:PYSEC-2025-111...