Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:pypi/django@1.4.0a0
Typepypi
Namespace
Namedjango
Version1.4.0a0
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version4.2.29
Latest_non_vulnerable_version6.0.4
Affected_by_vulnerabilities
0
url VCID-p543-5y7x-63hd
vulnerability_id VCID-p543-5y7x-63hd
summary 
Denial-of-service possibility in logout() view by filling session store
A session can be created when anonymously accessing the `django.contrib.auth.views.logout` view (provided it wasn't decorated with `django.contrib.auth.decorators.login_required` as done in the admin). This allows an attacker to easily create many new session records by sending repeated requests, potentially filling up the session store or causing other users' session records to be evicted.
references
0
reference_url https://www.djangoproject.com/weblog/2015/aug/18/security-releases/
reference_id
reference_type
scores
url https://www.djangoproject.com/weblog/2015/aug/18/security-releases/
fixed_packages
0
url pkg:pypi/django@1.4.22
purl pkg:pypi/django@1.4.22
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dhb-9yue-33h7
1
vulnerability VCID-325d-7dfk-sqd2
2
vulnerability VCID-6gss-ppm5-3yc9
3
vulnerability VCID-84mm-45p6-xkau
4
vulnerability VCID-896g-hqec-ryb9
5
vulnerability VCID-8jaq-53td-wbeg
6
vulnerability VCID-8teq-9xr9-q3fg
7
vulnerability VCID-9uzd-mmyv-mfh4
8
vulnerability VCID-br5x-v7md-47hp
9
vulnerability VCID-e2jd-yd4j-kqgt
10
vulnerability VCID-k6s1-gnmc-e3ed
11
vulnerability VCID-qm34-ec8s-tfd7
12
vulnerability VCID-ukxp-wqpr-t3by
13
vulnerability VCID-w2dv-u8h6-sbgs
14
vulnerability VCID-w4pr-k5nj-ckgy
15
vulnerability VCID-x4ev-6zjm-sbe4
16
vulnerability VCID-x516-xwze-6ba3
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.4.22
1
url pkg:pypi/django@1.5
purl pkg:pypi/django@1.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dhb-9yue-33h7
1
vulnerability VCID-2m9f-3cgw-ekdr
2
vulnerability VCID-325d-7dfk-sqd2
3
vulnerability VCID-42cm-j2av-87ea
4
vulnerability VCID-5g4y-1qmy-27bd
5
vulnerability VCID-5v8n-rma9-rqd4
6
vulnerability VCID-6gss-ppm5-3yc9
7
vulnerability VCID-84mm-45p6-xkau
8
vulnerability VCID-896g-hqec-ryb9
9
vulnerability VCID-8jaq-53td-wbeg
10
vulnerability VCID-8teq-9xr9-q3fg
11
vulnerability VCID-9uzd-mmyv-mfh4
12
vulnerability VCID-a715-2qks-wyhn
13
vulnerability VCID-bgjt-c6sa-pfaj
14
vulnerability VCID-bgmv-mf3x-bkew
15
vulnerability VCID-br5x-v7md-47hp
16
vulnerability VCID-c1n5-4ars-u7ff
17
vulnerability VCID-e2jd-yd4j-kqgt
18
vulnerability VCID-eker-m822-cuax
19
vulnerability VCID-fk27-94p2-8kft
20
vulnerability VCID-gwme-keqv-kkgr
21
vulnerability VCID-hk24-1yzs-ybhu
22
vulnerability VCID-jc9f-vgy8-ruan
23
vulnerability VCID-jumh-hkhx-7qc9
24
vulnerability VCID-k6s1-gnmc-e3ed
25
vulnerability VCID-q64b-r7td-2yab
26
vulnerability VCID-qjqs-zfd5-ckbt
27
vulnerability VCID-qm34-ec8s-tfd7
28
vulnerability VCID-qzba-9xmg-3qer
29
vulnerability VCID-sbr6-pybe-dubq
30
vulnerability VCID-spwd-dz6f-5fh9
31
vulnerability VCID-t8ec-st1v-s3e5
32
vulnerability VCID-ukxp-wqpr-t3by
33
vulnerability VCID-w2dv-u8h6-sbgs
34
vulnerability VCID-w4pr-k5nj-ckgy
35
vulnerability VCID-x4ev-6zjm-sbe4
36
vulnerability VCID-x516-xwze-6ba3
37
vulnerability VCID-x6np-rvrt-nyb2
38
vulnerability VCID-yemh-qd63-wuca
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.5
2
url pkg:pypi/django@1.7.10
purl pkg:pypi/django@1.7.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-325d-7dfk-sqd2
1
vulnerability VCID-6gss-ppm5-3yc9
2
vulnerability VCID-84mm-45p6-xkau
3
vulnerability VCID-896g-hqec-ryb9
4
vulnerability VCID-8jaq-53td-wbeg
5
vulnerability VCID-8teq-9xr9-q3fg
6
vulnerability VCID-9uzd-mmyv-mfh4
7
vulnerability VCID-br5x-v7md-47hp
8
vulnerability VCID-e2jd-yd4j-kqgt
9
vulnerability VCID-k6s1-gnmc-e3ed
10
vulnerability VCID-qm34-ec8s-tfd7
11
vulnerability VCID-ukxp-wqpr-t3by
12
vulnerability VCID-w2dv-u8h6-sbgs
13
vulnerability VCID-w4pr-k5nj-ckgy
14
vulnerability VCID-x4ev-6zjm-sbe4
15
vulnerability VCID-x516-xwze-6ba3
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.7.10
3
url pkg:pypi/django@1.8.4
purl pkg:pypi/django@1.8.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-325d-7dfk-sqd2
1
vulnerability VCID-6gss-ppm5-3yc9
2
vulnerability VCID-84mm-45p6-xkau
3
vulnerability VCID-896g-hqec-ryb9
4
vulnerability VCID-8jaq-53td-wbeg
5
vulnerability VCID-8teq-9xr9-q3fg
6
vulnerability VCID-9uzd-mmyv-mfh4
7
vulnerability VCID-bdms-nb18-guf9
8
vulnerability VCID-br5x-v7md-47hp
9
vulnerability VCID-e2jd-yd4j-kqgt
10
vulnerability VCID-jae8-w85w-cyfu
11
vulnerability VCID-k25u-g17y-hyfh
12
vulnerability VCID-k6s1-gnmc-e3ed
13
vulnerability VCID-mv1p-yxvp-pbh6
14
vulnerability VCID-qm34-ec8s-tfd7
15
vulnerability VCID-uk1w-hehw-dyda
16
vulnerability VCID-ukxp-wqpr-t3by
17
vulnerability VCID-w2dv-u8h6-sbgs
18
vulnerability VCID-w4pr-k5nj-ckgy
19
vulnerability VCID-x4ev-6zjm-sbe4
20
vulnerability VCID-x516-xwze-6ba3
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.4
aliases GMS-2015-21
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-p543-5y7x-63hd
Fixing_vulnerabilities
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:pypi/django@1.4.0a0