CVE-2026-16215

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-16215
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-16215.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-16215
Published
2026-07-19T04:30:09.330Z
Modified
2026-07-21T03:41:44.484579097Z
Severity
  • 5.5 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
geex-arts django-jet OAuth Credential Revoke authorization
Details

A security flaw has been discovered in geex-arts django-jet up to 1.0.8. This impacts an unknown function of the component OAuth Credential Revoke Handler. Performing a manipulation results in missing authorization. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/16xxx/CVE-2026-16215.json",
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-862",
        "CWE-863"
    ]
}
References

Affected packages

Git / github.com/geex-arts/django-jet

Affected ranges

Type
GIT
Repo
https://github.com/geex-arts/django-jet
Events
Introduced
bf922900abfce7eb2ebebe02daf3fc4a083b07dc
Last affected
465b994c2922e6f8cc057cac045782a801044c92
Database specific 
{
    "extracted_events": [
        {
            "introduced": "1.0.0"
        },
        {
            "last_affected": "1.0.0"
        },
        {
            "introduced": "1.0.1"
        },
        {
            "last_affected": "1.0.1"
        },
        {
            "introduced": "1.0.2"
        },
        {
            "last_affected": "1.0.2"
        },
        {
            "introduced": "1.0.3"
        },
        {
            "last_affected": "1.0.3"
        },
        {
            "introduced": "1.0.4"
        },
        {
            "last_affected": "1.0.4"
        },
        {
            "introduced": "1.0.5"
        },
        {
            "last_affected": "1.0.5"
        },
        {
            "introduced": "1.0.6"
        },
        {
            "last_affected": "1.0.6"
        },
        {
            "introduced": "1.0.7"
        },
        {
            "last_affected": "1.0.7"
        },
        {
            "introduced": "1.0.8"
        },
        {
            "last_affected": "1.0.8"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

1.*
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-16215.json"