Security advisories

medium2026-02-03

CVE-2026-1312-Django has an SQL Injection issue

django/django · GHSA-6426-9fv3-65x8

high2026-02-03

CVE-2026-1207-Django has an SQL Injection issue

django/django · GHSA-mwm9-4648-f68q

low2026-02-03

CVE-2026-1285-Django has Inefficient Algorithmic Complexity

django/django · GHSA-4rrr-2h4v-f3j9

low2026-02-03

CVE-2025-14550-Django has Inefficient Algorithmic Complexity

django/django · GHSA-33mw-q7rj-mjwj

low2026-02-03

CVE-2025-13473-Django has Observable Timing Discrepancy

django/django · GHSA-2mcm-79hx-8fxw

medium2026-02-03

CVE-2025-67855-Moodle vulnerable to Cross-site Scripting

moodle/moodle · GHSA-vwhw-vp9v-q9c9

low2026-02-03

CVE-2025-67852-Moodle Open Redirect vulnerability

moodle/moodle · GHSA-qv78-6gpp-hm68

medium2026-02-03

CVE-2025-67856-Moodle has an authorization logic flaw

moodle/moodle · GHSA-hcm6-q6pc-xfhm

medium2026-02-03

CVE-2025-67857-Moodle Inserts Sensitive Information Into Sent Data

moodle/moodle · GHSA-8jrv-wx83-w3xj

high2026-02-03

CVE-2025-67853-Moodle Affected by Improper Restriction of Excessive Authentication Attempts

moodle/moodle · GHSA-5cx4-w4fh-fr57

medium2026-02-03

CVE-2025-67851-Moodle formula injection vulnerability

moodle/moodle · GHSA-qfh6-h7j6-fvjv

high2026-02-03

CVE-2025-67849-Moodle Cross-site Scripting (XSS) vulnerability

moodle/moodle · GHSA-mhf6-pp52-8wqj

high2026-02-03

CVE-2025-67848-Moodle authentication bypass vulnerability

moodle/moodle · GHSA-j5jv-w5cw-j9ff

high2026-02-03

CVE-2025-67850-Moodle vulnerable to Cross-site Scripting

moodle/moodle · GHSA-6mmv-f6c6-v6q8

medium2026-02-03

CVE-2025-70959-Tendenci CMS Contains a Cross-site Scripting Vulnerability in its Jobs Module

tendenci/tendenci · GHSA-g7hj-29xq-r64w

medium2026-02-03

CVE-2025-70958-Subrion CMS vulnerable to cross-site scripting

intelliants/subrion · GHSA-9jjm-mc56-3qxv

medium2026-02-03

CVE-2025-70960-Tendenci CMS contains a stored Cross-site Scripting (XSS) vulnerability in the Forums module

tendenci/tendenci · GHSA-6fvp-wmh6-jg95

high2026-02-02

CVE-2026-25157-OpenClaw/Clawdbot has OS Command Injection via Project Root Path in sshNodeCommand

openclaw/openclaw · GHSA-q284-4pvr-m585

high2026-02-02

CVE-2026-25253-OpenClaw/Clawdbot has 1-Click RCE via Authentication Token Exfiltration From gatewayUrl

openclaw/openclaw · GHSA-g8p2-7wf7-98mq

high2026-02-02

CVE-2026-24763-OpenClaw/Clawdbot Docker Execution has Authenticated Command Injection via PATH Environment Variable

openclaw/openclaw · GHSA-mc68-q9jw-2h3v