MEDIUMPyPI
GHSA-22cc-w7xm-rfhx· CVE-2024-25170, PYSEC-2026-1626Mezzanine allows attackers to bypass access controls via manipulating the Host header
Modified: 7/7/2026
package
PyPI/mezzanine
pkg:pypi/mezzanine
MEDIUM6.1PyPI
GHSA-2544-hpcq-6g27· CVE-2025-29573, PYSEC-2025-136Mezzanine CMS Cross-Site Scripting (XSS) vulnerability
Modified: 6/6/2026
MEDIUM4.8PyPI
GHSA-269j-37ww-cmh3· CVE-2025-50481, PYSEC-2025-137Mezzanine CMS vulnerable to Cross-site Scripting
Modified: 6/6/2026
MEDIUMPyPI
GHSA-7pr5-w74r-jjj7· CVE-2025-6050, PYSEC-2025-236Mezzanine CMS has a Stored Cross-Site Scripting (XSS) vulnerability in the displayable_links_js function
Modified: 7/20/2026
MEDIUM6.1PyPI
GHSA-fpv7-hx6r-9vcx· CVE-2020-19002, PYSEC-2021-343Mezzanine Cross Site Scripting (XSS) vulnerability
Modified: 6/10/2026
MEDIUMPyPI
GHSA-qp56-82vp-xqgv· CVE-2024-25169, PYSEC-2026-1627Mezzanine allows attackers to bypass access control mechanisms
Modified: 7/7/2026
—PyPI
PYSEC-2021-343· CVE-2020-19002, GHSA-fpv7-hx6r-9vcxModified: 6/10/2026
MEDIUM6.1PyPI
PYSEC-2025-136· CVE-2025-29573, GHSA-2544-hpcq-6g27Modified: 6/10/2026
MEDIUM4.8PyPI
PYSEC-2025-137· CVE-2025-50481, GHSA-269j-37ww-cmh3Modified: 6/10/2026
MEDIUM4.8PyPI
PYSEC-2025-236· CVE-2025-6050, GHSA-7pr5-w74r-jjj7Modified: 7/13/2026
—PyPI
PYSEC-2026-1626· CVE-2024-25170, GHSA-22cc-w7xm-rfhxMezzanine allows attackers to bypass access controls via manipulating the Host header
Modified: 7/7/2026
—PyPI
PYSEC-2026-1627· CVE-2024-25169, GHSA-qp56-82vp-xqgvMezzanine allows attackers to bypass access control mechanisms
Modified: 7/7/2026