Medium
geex-arts django-jet OAuth Credential Revoke authorization
Type: advisorySources: OSV
A security flaw has been discovered in geex-arts django-jet up to 1.0.8. This impacts an unknown function of the component OAuth Credential Revoke Handler. Performing a manipulation results in missing authorization. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2026-16215
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 4 Nov 2026, 04:07 UTC · Revision 1
Source evidence
geex-arts django-jet OAuth Credential Revoke authorization
core-osv · Original sourcePublished 19 Jul 2026, 04:30 UTC
A security flaw has been discovered in geex-arts django-jet up to 1.0.8. This impacts an unknown function of the component OAuth Credential Revoke Handler. Performing a manipulation results in missing authorization. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
osv:CVE-2026-16215
Complete source record
{
"id": "dd727835bf1f62e33f33df166e937b485d9d6b72f5e946e33ca78912c34cb401",
"url": "https://osv.dev/vulnerability/CVE-2026-16215",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "geex-arts django-jet OAuth Credential Revoke authorization",
"summary": "A security flaw has been discovered in geex-arts django-jet up to 1.0.8. This impacts an unknown function of the component OAuth Credential Revoke Handler. Performing a manipulation results in missing authorization. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.",
"evidence": "osv:CVE-2026-16215",
"products": [],
"severity": "medium",
"structured": {
"id": "CVE-2026-16215",
"aliases": [
"CVE-2026-16215"
],
"metrics": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/geex-arts/django-jet",
"type": "GIT",
"events": [
{
"introduced": "bf922900abfce7eb2ebebe02daf3fc4a083b07dc"
},
{
"last_affected": "465b994c2922e6f8cc057cac045782a801044c92"
}
],
"database_specific": {
"extracted_events": [
{
"range": [
{
"introduced": "1.0.0"
},
{
"last_affected": "1.0.0"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "1.0.1"
},
{
"last_affected": "1.0.1"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "1.0.2"
},
{
"last_affected": "1.0.2"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "1.0.3"
},
{
"last_affected": "1.0.3"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "1.0.4"
},
{
"last_affected": "1.0.4"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "1.0.5"
},
{
"last_affected": "1.0.5"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "1.0.6"
},
{
"last_affected": "1.0.6"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "1.0.7"
},
{
"last_affected": "1.0.7"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "1.0.8"
},
{
"last_affected": "1.0.8"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "0"
},
{
"last_affected": "1.0.8"
}
],
"source": "DESCRIPTION"
}
]
}
}
],
"versions": [
"1.0.0",
"1.0.1",
"1.0.2",
"1.0.3",
"1.0.4",
"1.0.5",
"1.0.6",
"1.0.7",
"1.0.8"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-16215.json"
}
}
],
"modified": "2026-10-28T02:30:33.088802501Z",
"provider": "osv",
"references": [
"https://github.com/geex-arts/django-jet/",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/16xxx/CVE-2026-16215.json",
"https://nvd.nist.gov/vuln/detail/CVE-2026-16215",
"https://vuldb.com/cve/CVE-2026-16215",
"https://vuldb.com/submit/857946",
"https://vuldb.com/vuln/380038",
"https://github.com/geex-arts/django-jet/issues/528",
"https://vuldb.com/vuln/380038/cti"
],
"provider_metadata": {
"cwe_ids": [
"CWE-862",
"CWE-863"
],
"cna_assigner": "VulDB",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/16xxx/CVE-2026-16215.json"
}
},
"related_cves": [
{
"value": "CVE-2026-16215",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 500227,
"published_at": "2026-07-19T04:30:09.33+00:00"
}