Approved changes feed: RSS · Atom

cpe:2.3:a:geex-arts:django-jet:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGeex Arts (0003c1d1-c1d1-5cc4-990b-cb3db5cedefc)
ProductDjango Jet (40e6c3cf-2b3b-53cf-b022-31949bc3fa94)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-16216 vulnerable 2026-07-29 00:26:18.594393 geex-arts django-jet OAuth cross-site request forgery
MEDIUM (4.3)
A weakness has been identified in geex-arts django-jet up to 1.0.8. Affected is an unknown function of the component OAuth Handler. Executing a manipulation can lead to cross-site request forgery. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-07-19T05:00:10.797Z
Updated: 2026-07-21T14:41:20.488Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-16215 vulnerable 2026-07-29 00:26:18.594232 geex-arts django-jet OAuth Credential Revoke authorization
MEDIUM (6.5)
A security flaw has been discovered in geex-arts django-jet up to 1.0.8. This impacts an unknown function of the component OAuth Credential Revoke Handler. Performing a manipulation results in missing authorization. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-07-19T04:30:09.330Z
Updated: 2026-07-20T10:33:32.993Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-16214 vulnerable 2026-07-29 00:26:18.593902 geex-arts django-jet Dashboard views.py authorization
MEDIUM (6.3)
A vulnerability was identified in geex-arts django-jet up to 1.0.8. This affects an unknown function of the file jet/dashboard/views.py of the component Dashboard Module. Such manipulation leads to authorization bypass. The attack can be executed remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-07-19T04:15:09.590Z
Updated: 2026-07-22T14:59:38.479Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.