python-django vulnerabilities — 14 matching vulnerabilities

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed — no installation and no source-code access required.

Scan your app free →
Severity Vulnerability Package Ecosystem Disclosed Fixed version
Unrated Catastrophic Backtracking Vulnerabilities in python-django python-django Debian 08 Mar 2018 1.4.22-1+deb7u4
Unrated Open Redirect and XSS Vulnerabilities in python-django python-django Debian 05 Apr 2017 1.4.22-1+deb7u3
Unrated DNS Rebinding Vulnerability in python-django python-django Debian 14 Nov 2016 1.4.22-1+deb7u2
Unrated CSRF Protection Bypass in python-django python-django Debian 06 Oct 2016 1.4.22-1+deb7u1
Unrated Vulnerability in python-django - security update python-django Debian 09 Aug 2016 1.4.22-1
Unrated Cross-Site Scripting Vulnerability in python-django python-django Debian 21 Jul 2016 1.4.5-1+deb7u17
Unrated Security Update for python-django python-django Debian 07 Apr 2016 1.4.5-1+deb7u16
Unrated Vulnerability in python-django - security update python-django Debian 25 Nov 2015 1.4.5-1+deb7u14
Unrated Vulnerability in python-django - security update python-django Debian 18 Aug 2015 1.4.5-1+deb7u13
Unrated Security Update for python-django python-django Debian 08 Jul 2015 1.4.5-1+deb7u12
Unrated Security Update for python-django: Cross-Site Scripting Vulnerability python-django Debian 24 Mar 2015 1.4.5-1+deb7u11
Unrated Security Update for python-django python-django Debian 03 Feb 2015 1.4.5-1+deb7u9
Unrated Security Update for python-django python-django Debian 22 Aug 2014 1.4.5-1+deb7u8
Unrated Cross-Site Scripting Vulnerability in python-django python-django Debian 01 Sep 2013 1.4.5-1+deb7u2
Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

Searching the database

How do I search for a CVE or a package?

Type a CVE id, package name, ecosystem or keyword into the search field. Results include the severity, the affected package, the ecosystem, the disclosure date and the fixed version.

Can I filter by severity or by whether a fix exists?

Yes. The filters on the left narrow the list to critical, high, medium or low vulnerabilities, to a single ecosystem, and to vulnerabilities that have a fix available or none yet.

What does "No fix published" mean?

No patched version has been released for that vulnerability yet. The vulnerability page still shows the affected range and any workaround that can reduce exposure in the meantime.