python3Packages.django-cms
django-cms 5.0.6 · pkgs/development/python-modules/django-cms/default.nix
Health
Risk
risk 60 critical
- +60 6 open advisories
Version
5.0.6 no newer release known to repology
Channels
Hydra
no finished build of nixpkgs/unstable/python3Packages.django-cms.x86_64-linux
Advisories
GHSA-4xfr-4p46-gc6p medium 6.5 django CMS: Clipboard copy IDOR discloses unauthorized plugin content (OSV, for this version)
CVE-2026-54622
GHSA-6x92-6vx4-5fwr medium django CMS: Broken access control in page *Duplicate* allows reading the content of any page (cross-site / restriction bypass) (OSV, for this version)
CVE-2026-63003
GHSA-8jj7-4v57-frf5 high 7.1 django CMS: Plugin move endpoint allows cyclic reparenting (DoS) (OSV, for this version)
CVE-2026-54623
GHSA-8qj2-c6q4-f399 medium django CMS: Missing authorization in `render_object_structure` discloses non-PageContent placeholder structure to low-privileged staff (OSV, for this version)
CVE-2026-61663
GHSA-fwjf-m4qw-9f2x medium 4.8 django CMS: Page cache ignores plugin-declared Vary headers (disclosure & poisoning) (OSV, for this version)
CVE-2026-54625
GHSA-vgxm-h9gx-h9w7 medium 6.5 django CMS: Structure endpoint bypasses page-view permission (OSV, for this version)
CVE-2026-54624
Packaging
not read yet: the next index sweep reads it
Maintainers
Pull requests 1
Issues 0
None open.