—PyPI
PYSEC-2020-112· CVE-2020-14942, GHSA-jqmc-fxxp-r589Modified: 11/8/2023
package
PyPI/tendenci
pkg:pypi/tendenci
—PyPI
PYSEC-2026-136· CVE-2020-36962, GHSA-4q3w-jgfx-4792Modified: 6/10/2026
MEDIUM5.4PyPI
PYSEC-2026-137· CVE-2025-70959, GHSA-g7hj-29xq-r64wModified: 6/10/2026
MEDIUM5.4PyPI
PYSEC-2026-138· CVE-2025-70960, GHSA-6fvp-wmh6-jg95Modified: 7/13/2026
MEDIUM6.8PyPI
PYSEC-2026-1950· CVE-2026-23946, GHSA-339m-4qw5-j2g3Tendenci Affected by Authenticated Remote Code Execution via Pickle Deserialization
Modified: 7/7/2026
MEDIUM6.8PyPI
GHSA-339m-4qw5-j2g3· CVE-2026-23946, PYSEC-2026-1950Tendenci Affected by Authenticated Remote Code Execution via Pickle Deserialization
Modified: 7/7/2026
CRITICAL9.8PyPI
GHSA-4q3w-jgfx-4792· CVE-2020-36962, PYSEC-2026-136Tendenci is Vulnerable to CSV Formula Injection through its Contact Form Message Field
Modified: 6/9/2026
MEDIUM5.4PyPI
GHSA-6fvp-wmh6-jg95· CVE-2025-70960, PYSEC-2026-138Tendenci CMS contains a stored Cross-site Scripting (XSS) vulnerability in the Forums module
Modified: 6/10/2026
MEDIUM5.4PyPI
GHSA-g7hj-29xq-r64w· CVE-2025-70959, PYSEC-2026-137Tendenci CMS Contains a Cross-site Scripting Vulnerability in its Jobs Module
Modified: 6/9/2026
CRITICAL9.8PyPI
GHSA-jqmc-fxxp-r589· CVE-2020-14942, PYSEC-2020-112Deserialization of Untrusted Data in Tendenci
Modified: 2/4/2026