Threats affecting pkg:pypi/aiyiyi121/sxdevops

CVE-2026-93968 is a medium severity vulnerability in aiyiyi121 SxDevOps versions 1.0 and 1.1. It involves improper privilege management in the UserSerializer component, specifically in the update function of backend/rbac/serializers.py. The vulnerability can be exploited remotely without user interaction. The vendor has released a patch identified by commit 2b4bf8585c3e731e7a8af30801ea46680bc783f9 to fix this issue.