CVE-2026-23946
2 advisories.
PyPI/tendenci CVE-2026-23946: medium 6.8, EPSS 0.84%
Tendenci Affected by Authenticated Remote Code Execution via Pickle Deserialization
Action: Upgrade tendenci to 15.3.12 or later.
pip install tendenci==15.3.12Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 15.3.12 | - |
Fixed versions
| 15.3.12 |
Sources
- osv: GHSA-339m-4qw5-j2g3
- https://github.com/tendenci/tendenci/security/advisories/GHSA-339m-4qw5-j2g3
- https://nvd.nist.gov/vuln/detail/CVE-2020-14942
- https://nvd.nist.gov/vuln/detail/CVE-2026-23946
- https://github.com/tendenci/tendenci/issues/867
- https://github.com/tendenci/tendenci/commit/23d9fd85ab7654e9c83cfc86cb4175c0bd7a77f1
- https://github.com/tendenci/tendenci/commit/2ff0a457614944a1b417081c543ea4c5bb95d636
- https://github.com/tendenci/tendenci/commit/63e1b84a5b163466d1d8d811d35e7021a7ca0d0e
- https://docs.python.org/3/library/pickle.html#restricting-globals
- https://github.com/advisories/GHSA-jqmc-fxxp-r589
- https://github.com/tendenci/tendenci
- https://github.com/tendenci/tendenci/releases/tag/v15.3.12
CVE-2026-23946 · published · modified · JSON
PyPI/tendenci CVE-2026-23946: medium 6.8, EPSS 0.84%
Tendenci Affected by Authenticated Remote Code Execution via Pickle Deserialization
Action: Upgrade tendenci to 15.3.12 or later.
pip install tendenci==15.3.12Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 15.3.12 | - |
Fixed versions
| 15.3.12 |
Sources
- osv: PYSEC-2026-1950
- https://github.com/tendenci/tendenci/security/advisories/GHSA-339m-4qw5-j2g3
- https://nvd.nist.gov/vuln/detail/CVE-2020-14942
- https://nvd.nist.gov/vuln/detail/CVE-2026-23946
- https://github.com/tendenci/tendenci/issues/867
- https://github.com/tendenci/tendenci/commit/23d9fd85ab7654e9c83cfc86cb4175c0bd7a77f1
- https://github.com/tendenci/tendenci/commit/2ff0a457614944a1b417081c543ea4c5bb95d636
- https://github.com/tendenci/tendenci/commit/63e1b84a5b163466d1d8d811d35e7021a7ca0d0e
- https://docs.python.org/3/library/pickle.html#restricting-globals
- https://github.com/advisories/GHSA-jqmc-fxxp-r589
- https://github.com/tendenci/tendenci
- https://github.com/tendenci/tendenci/releases/tag/v15.3.12
- https://pypi.org/project/tendenci
- https://github.com/advisories/GHSA-339m-4qw5-j2g3
CVE-2026-23946 · published · modified · JSON