MEDIUM 6.8 PyPI
GHSA-339m-4qw5-j2g3 · CVE-2026-23946 Tendenci Affected by Authenticated Remote Code Execution via Pickle Deserialization
Modified: 2/4/2026
package
PyPI / tendenci
pkg:pypi/tendenci
CRITICAL 9.8 PyPI
GHSA-4q3w-jgfx-4792 · CVE-2020-36962, PYSEC-2026-136 Tendenci is Vulnerable to CSV Formula Injection through its Contact Form Message Field
Modified: 6/9/2026
MEDIUM 5.4 PyPI
GHSA-g7hj-29xq-r64w · CVE-2025-70959, PYSEC-2026-137 Tendenci CMS Contains a Cross-site Scripting Vulnerability in its Jobs Module
Modified: 6/9/2026
CRITICAL 9.8 PyPI
GHSA-jqmc-fxxp-r589 · CVE-2020-14942, PYSEC-2020-112 Deserialization of Untrusted Data in Tendenci
Modified: 2/4/2026
— PyPI
PYSEC-2020-112 · CVE-2020-14942, GHSA-jqmc-fxxp-r589 Modified: 11/8/2023
— PyPI
PYSEC-2026-136 · CVE-2020-36962, GHSA-4q3w-jgfx-4792 Modified: 6/9/2026
MEDIUM 5.4 PyPI
PYSEC-2026-137 · CVE-2025-70959, GHSA-g7hj-29xq-r64w Modified: 6/9/2026
MEDIUM 5.4 PyPI
PYSEC-2026-138 · CVE-2025-70960 Modified: 5/21/2026