https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T16:50:03.223634+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-0869 CVE-2022-0869 — Multiple Open Redirect in nitely/spirit 2026-10-15T16:50:03.225438+00:00

Affected: nitely/spirit

Multiple Open Redirect in GitHub repository nitely/spirit prior to 0.12.3.

 https://cve.radiocsirt.org/vuln/ghsa-5p9j-w2wx-qx4c GHSA-5p9j-w2wx-qx4c — Open Redirect in django-spirit 2026-10-15T16:50:03.225486+00:00

Affected: PyPI: django-spirit

django-spirit prior to version 0.12.3 is vulnerable to open redirect. In the /user/login endpoint, it doesn't check the value of the next parameter when the user is logged in and passes it directly to redirect which result to open redirect. This also affects /user/logout, /user/register, /user/login, /user/resend-activation.