djangoSIGE vulnerabilities
CVEs whose affected-version data names the djangoSIGE package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-64821Medium· 4.3PoCdjangoSIGE 1.10 CSRF via GET-based Order Cancellation Views
djangoSIGE through 1.10 (commit a6fe7e8) contains a cross-site request forgery vulnerability that allows unauthenticated attackers to cancel sales or purchase orders on behalf of authenticated users by exploiting order-cancellation logic…
▾ Twilightthiagopena · djangoSIGEEPSS 0.22%via CVEORG
CVE-2026-64822Medium· 5.3PoCdjangoSIGE 1.10 User Enumeration via ForgotPasswordView
djangoSIGE through 1.10 (commit a6fe7e8) contains a user enumeration vulnerability in ForgotPasswordView within djangosige/apps/login/views.py that allows unauthenticated attackers to identify valid accounts by observing distinct error m…
▾ Twilightthiagopena · djangoSIGEEPSS 0.42%via CVEORG