Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-gfym-spzk-w7gk
Summary
Aliases
0
alias CVE-2026-4277
1
alias GHSA-pwjp-ccjc-ghwg
Fixed_packages
0
url pkg:apk/alpine/py3-django@4.2.30-r0?arch=aarch64&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/py3-django@4.2.30-r0?arch=aarch64&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-django@4.2.30-r0%3Farch=aarch64&distroversion=v3.23&reponame=community
1
url pkg:apk/alpine/py3-django@4.2.30-r0?arch=armhf&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/py3-django@4.2.30-r0?arch=armhf&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-django@4.2.30-r0%3Farch=armhf&distroversion=v3.23&reponame=community
2
url pkg:apk/alpine/py3-django@4.2.30-r0?arch=armv7&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/py3-django@4.2.30-r0?arch=armv7&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-django@4.2.30-r0%3Farch=armv7&distroversion=v3.23&reponame=community
3
url pkg:apk/alpine/py3-django@4.2.30-r0?arch=loongarch64&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/py3-django@4.2.30-r0?arch=loongarch64&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-django@4.2.30-r0%3Farch=loongarch64&distroversion=v3.23&reponame=community
4
url pkg:apk/alpine/py3-django@4.2.30-r0?arch=ppc64le&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/py3-django@4.2.30-r0?arch=ppc64le&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-django@4.2.30-r0%3Farch=ppc64le&distroversion=v3.23&reponame=community
5
url pkg:apk/alpine/py3-django@4.2.30-r0?arch=riscv64&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/py3-django@4.2.30-r0?arch=riscv64&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-django@4.2.30-r0%3Farch=riscv64&distroversion=v3.23&reponame=community
6
url pkg:apk/alpine/py3-django@4.2.30-r0?arch=s390x&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/py3-django@4.2.30-r0?arch=s390x&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-django@4.2.30-r0%3Farch=s390x&distroversion=v3.23&reponame=community
7
url pkg:apk/alpine/py3-django@4.2.30-r0?arch=x86&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/py3-django@4.2.30-r0?arch=x86&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-django@4.2.30-r0%3Farch=x86&distroversion=v3.23&reponame=community
8
url pkg:apk/alpine/py3-django@4.2.30-r0?arch=x86_64&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/py3-django@4.2.30-r0?arch=x86_64&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-django@4.2.30-r0%3Farch=x86_64&distroversion=v3.23&reponame=community
9
url pkg:apk/alpine/py3-django@5.2.13-r0?arch=aarch64&distroversion=edge&reponame=community
purl pkg:apk/alpine/py3-django@5.2.13-r0?arch=aarch64&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-django@5.2.13-r0%3Farch=aarch64&distroversion=edge&reponame=community
10
url pkg:apk/alpine/py3-django@5.2.13-r0?arch=armhf&distroversion=edge&reponame=community
purl pkg:apk/alpine/py3-django@5.2.13-r0?arch=armhf&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-django@5.2.13-r0%3Farch=armhf&distroversion=edge&reponame=community
11
url pkg:apk/alpine/py3-django@5.2.13-r0?arch=armv7&distroversion=edge&reponame=community
purl pkg:apk/alpine/py3-django@5.2.13-r0?arch=armv7&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-django@5.2.13-r0%3Farch=armv7&distroversion=edge&reponame=community
12
url pkg:apk/alpine/py3-django@5.2.13-r0?arch=loongarch64&distroversion=edge&reponame=community
purl pkg:apk/alpine/py3-django@5.2.13-r0?arch=loongarch64&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-django@5.2.13-r0%3Farch=loongarch64&distroversion=edge&reponame=community
13
url pkg:apk/alpine/py3-django@5.2.13-r0?arch=ppc64le&distroversion=edge&reponame=community
purl pkg:apk/alpine/py3-django@5.2.13-r0?arch=ppc64le&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-django@5.2.13-r0%3Farch=ppc64le&distroversion=edge&reponame=community
14
url pkg:apk/alpine/py3-django@5.2.13-r0?arch=riscv64&distroversion=edge&reponame=community
purl pkg:apk/alpine/py3-django@5.2.13-r0?arch=riscv64&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-django@5.2.13-r0%3Farch=riscv64&distroversion=edge&reponame=community
15
url pkg:apk/alpine/py3-django@5.2.13-r0?arch=s390x&distroversion=edge&reponame=community
purl pkg:apk/alpine/py3-django@5.2.13-r0?arch=s390x&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-django@5.2.13-r0%3Farch=s390x&distroversion=edge&reponame=community
16
url pkg:apk/alpine/py3-django@5.2.13-r0?arch=x86&distroversion=edge&reponame=community
purl pkg:apk/alpine/py3-django@5.2.13-r0?arch=x86&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-django@5.2.13-r0%3Farch=x86&distroversion=edge&reponame=community
17
url pkg:apk/alpine/py3-django@5.2.13-r0?arch=x86_64&distroversion=edge&reponame=community
purl pkg:apk/alpine/py3-django@5.2.13-r0?arch=x86_64&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-django@5.2.13-r0%3Farch=x86_64&distroversion=edge&reponame=community
18
url pkg:deb/debian/python-django@3:3.2.25-0%2Bdeb12u2
purl pkg:deb/debian/python-django@3:3.2.25-0%2Bdeb12u2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:3.2.25-0%252Bdeb12u2
19
url pkg:deb/debian/python-django@3:4.2.30-1?distro=trixie
purl pkg:deb/debian/python-django@3:4.2.30-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:4.2.30-1%3Fdistro=trixie
20
url pkg:deb/debian/python-django@3:4.2.30-1
purl pkg:deb/debian/python-django@3:4.2.30-1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:4.2.30-1
21
url pkg:pypi/django@4.2.30
purl pkg:pypi/django@4.2.30
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@4.2.30
22
url pkg:pypi/django@5.2.13
purl pkg:pypi/django@5.2.13
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.2.13
23
url pkg:pypi/django@6.0.4
purl pkg:pypi/django@6.0.4
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@6.0.4
Affected_packages
0
url pkg:deb/debian/python-django@2:2.2.28-1~deb11u2
purl pkg:deb/debian/python-django@2:2.2.28-1~deb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1adz-zw3h-pqek
1
vulnerability VCID-28g3-ubx6-ebff
2
vulnerability VCID-2tfv-rtq7-2fg9
3
vulnerability VCID-46pv-pzsu-jucd
4
vulnerability VCID-4ztz-fq98-5fh1
5
vulnerability VCID-7tph-k8q2-bue2
6
vulnerability VCID-896g-hqec-ryb9
7
vulnerability VCID-8m4b-y4va-kqgm
8
vulnerability VCID-8qu1-45n9-gyb1
9
vulnerability VCID-8xgs-8xjr-cber
10
vulnerability VCID-9abh-apwm-ebab
11
vulnerability VCID-9uzd-mmyv-mfh4
12
vulnerability VCID-ac4c-321h-tqfk
13
vulnerability VCID-c6xy-v4sf-u3hn
14
vulnerability VCID-e2jd-yd4j-kqgt
15
vulnerability VCID-e87q-1j8h-93hh
16
vulnerability VCID-ff2a-at5f-2qa8
17
vulnerability VCID-gfym-spzk-w7gk
18
vulnerability VCID-jh1e-72hp-fuf4
19
vulnerability VCID-jzae-1awh-k7cm
20
vulnerability VCID-m91a-6235-nye9
21
vulnerability VCID-mga4-an1w-qqf9
22
vulnerability VCID-msge-1mfu-7qfa
23
vulnerability VCID-mux4-uv98-hbbw
24
vulnerability VCID-q12d-kv8p-8ff7
25
vulnerability VCID-ssut-reka-r3f8
26
vulnerability VCID-u3zk-tff2-aua9
27
vulnerability VCID-ukkt-wgau-t3et
28
vulnerability VCID-v1xr-z4zu-yfb4
29
vulnerability VCID-w4pr-k5nj-ckgy
30
vulnerability VCID-wwa5-mhgu-9khz
31
vulnerability VCID-xgv1-s2ek-q3dp
32
vulnerability VCID-xhpa-mffz-syfy
33
vulnerability VCID-ysyp-h7ja-yff3
34
vulnerability VCID-z27q-zfpz-ckby
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@2:2.2.28-1~deb11u2
1
url pkg:deb/debian/python-django@2:2.2.28-1~deb11u2?distro=trixie
purl pkg:deb/debian/python-django@2:2.2.28-1~deb11u2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1adz-zw3h-pqek
1
vulnerability VCID-46pv-pzsu-jucd
2
vulnerability VCID-ac4c-321h-tqfk
3
vulnerability VCID-ff2a-at5f-2qa8
4
vulnerability VCID-gfym-spzk-w7gk
5
vulnerability VCID-jzae-1awh-k7cm
6
vulnerability VCID-mga4-an1w-qqf9
7
vulnerability VCID-ssut-reka-r3f8
8
vulnerability VCID-xhpa-mffz-syfy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@2:2.2.28-1~deb11u2%3Fdistro=trixie
2
url pkg:deb/debian/python-django@3:3.2.19-1%2Bdeb12u1
purl pkg:deb/debian/python-django@3:3.2.19-1%2Bdeb12u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1adz-zw3h-pqek
1
vulnerability VCID-46pv-pzsu-jucd
2
vulnerability VCID-ac4c-321h-tqfk
3
vulnerability VCID-ff2a-at5f-2qa8
4
vulnerability VCID-gfym-spzk-w7gk
5
vulnerability VCID-jzae-1awh-k7cm
6
vulnerability VCID-mga4-an1w-qqf9
7
vulnerability VCID-ssut-reka-r3f8
8
vulnerability VCID-xhpa-mffz-syfy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:3.2.19-1%252Bdeb12u1
3
url pkg:deb/debian/python-django@3:3.2.19-1%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/python-django@3:3.2.19-1%2Bdeb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1adz-zw3h-pqek
1
vulnerability VCID-46pv-pzsu-jucd
2
vulnerability VCID-ac4c-321h-tqfk
3
vulnerability VCID-ff2a-at5f-2qa8
4
vulnerability VCID-gfym-spzk-w7gk
5
vulnerability VCID-jzae-1awh-k7cm
6
vulnerability VCID-mga4-an1w-qqf9
7
vulnerability VCID-ssut-reka-r3f8
8
vulnerability VCID-xhpa-mffz-syfy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:3.2.19-1%252Bdeb12u1%3Fdistro=trixie
4
url pkg:deb/debian/python-django@3:4.2.28-0%2Bdeb13u1?distro=trixie
purl pkg:deb/debian/python-django@3:4.2.28-0%2Bdeb13u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1adz-zw3h-pqek
1
vulnerability VCID-46pv-pzsu-jucd
2
vulnerability VCID-ac4c-321h-tqfk
3
vulnerability VCID-ff2a-at5f-2qa8
4
vulnerability VCID-gfym-spzk-w7gk
5
vulnerability VCID-ssut-reka-r3f8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:4.2.28-0%252Bdeb13u1%3Fdistro=trixie
5
url pkg:deb/debian/python-django@3:4.2.28-0%2Bdeb13u1
purl pkg:deb/debian/python-django@3:4.2.28-0%2Bdeb13u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1adz-zw3h-pqek
1
vulnerability VCID-46pv-pzsu-jucd
2
vulnerability VCID-ac4c-321h-tqfk
3
vulnerability VCID-ff2a-at5f-2qa8
4
vulnerability VCID-gfym-spzk-w7gk
5
vulnerability VCID-ssut-reka-r3f8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:4.2.28-0%252Bdeb13u1
6
url pkg:deb/debian/python-django@3:4.2.29-1?distro=trixie
purl pkg:deb/debian/python-django@3:4.2.29-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1adz-zw3h-pqek
1
vulnerability VCID-46pv-pzsu-jucd
2
vulnerability VCID-ff2a-at5f-2qa8
3
vulnerability VCID-gfym-spzk-w7gk
4
vulnerability VCID-ssut-reka-r3f8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:4.2.29-1%3Fdistro=trixie
7
url pkg:deb/debian/python-django@3:4.2.29-1
purl pkg:deb/debian/python-django@3:4.2.29-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46pv-pzsu-jucd
1
vulnerability VCID-ff2a-at5f-2qa8
2
vulnerability VCID-gfym-spzk-w7gk
3
vulnerability VCID-ssut-reka-r3f8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:4.2.29-1
8
url pkg:pypi/django@4.2
purl pkg:pypi/django@4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1adz-zw3h-pqek
1
vulnerability VCID-28g3-ubx6-ebff
2
vulnerability VCID-2tfv-rtq7-2fg9
3
vulnerability VCID-3sac-ah8j-pucd
4
vulnerability VCID-42x9-8c3c-bug1
5
vulnerability VCID-46pv-pzsu-jucd
6
vulnerability VCID-4ztz-fq98-5fh1
7
vulnerability VCID-78r4-85ms-63hm
8
vulnerability VCID-7tph-k8q2-bue2
9
vulnerability VCID-84mm-45p6-xkau
10
vulnerability VCID-896g-hqec-ryb9
11
vulnerability VCID-8m4b-y4va-kqgm
12
vulnerability VCID-8qu1-45n9-gyb1
13
vulnerability VCID-8xgs-8xjr-cber
14
vulnerability VCID-9abh-apwm-ebab
15
vulnerability VCID-9uzd-mmyv-mfh4
16
vulnerability VCID-ac4c-321h-tqfk
17
vulnerability VCID-c6xy-v4sf-u3hn
18
vulnerability VCID-e2jd-yd4j-kqgt
19
vulnerability VCID-e87q-1j8h-93hh
20
vulnerability VCID-e9k9-1s9f-dbgv
21
vulnerability VCID-ff2a-at5f-2qa8
22
vulnerability VCID-gfym-spzk-w7gk
23
vulnerability VCID-jh1e-72hp-fuf4
24
vulnerability VCID-jzae-1awh-k7cm
25
vulnerability VCID-m91a-6235-nye9
26
vulnerability VCID-mga4-an1w-qqf9
27
vulnerability VCID-msge-1mfu-7qfa
28
vulnerability VCID-mux4-uv98-hbbw
29
vulnerability VCID-nda7-9219-6kce
30
vulnerability VCID-q12d-kv8p-8ff7
31
vulnerability VCID-rmdp-bnjj-zuf2
32
vulnerability VCID-ssut-reka-r3f8
33
vulnerability VCID-u3zk-tff2-aua9
34
vulnerability VCID-ukkt-wgau-t3et
35
vulnerability VCID-v1xr-z4zu-yfb4
36
vulnerability VCID-vwt9-q3dt-vbfg
37
vulnerability VCID-w4pr-k5nj-ckgy
38
vulnerability VCID-wwa5-mhgu-9khz
39
vulnerability VCID-wz1q-1tjp-4qhw
40
vulnerability VCID-xgv1-s2ek-q3dp
41
vulnerability VCID-xhpa-mffz-syfy
42
vulnerability VCID-ysyp-h7ja-yff3
43
vulnerability VCID-z27q-zfpz-ckby
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@4.2
9
url pkg:pypi/django@5.2
purl pkg:pypi/django@5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1adz-zw3h-pqek
1
vulnerability VCID-28g3-ubx6-ebff
2
vulnerability VCID-2tfv-rtq7-2fg9
3
vulnerability VCID-46pv-pzsu-jucd
4
vulnerability VCID-84mm-45p6-xkau
5
vulnerability VCID-896g-hqec-ryb9
6
vulnerability VCID-8qu1-45n9-gyb1
7
vulnerability VCID-9abh-apwm-ebab
8
vulnerability VCID-9uzd-mmyv-mfh4
9
vulnerability VCID-ac4c-321h-tqfk
10
vulnerability VCID-c6xy-v4sf-u3hn
11
vulnerability VCID-e9k9-1s9f-dbgv
12
vulnerability VCID-ff2a-at5f-2qa8
13
vulnerability VCID-gfym-spzk-w7gk
14
vulnerability VCID-msge-1mfu-7qfa
15
vulnerability VCID-mux4-uv98-hbbw
16
vulnerability VCID-nda7-9219-6kce
17
vulnerability VCID-ssut-reka-r3f8
18
vulnerability VCID-ukkt-wgau-t3et
19
vulnerability VCID-vwt9-q3dt-vbfg
20
vulnerability VCID-w4pr-k5nj-ckgy
21
vulnerability VCID-ysyp-h7ja-yff3
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.2
10
url pkg:pypi/django@6.0
purl pkg:pypi/django@6.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1adz-zw3h-pqek
1
vulnerability VCID-28g3-ubx6-ebff
2
vulnerability VCID-2tfv-rtq7-2fg9
3
vulnerability VCID-46pv-pzsu-jucd
4
vulnerability VCID-8qu1-45n9-gyb1
5
vulnerability VCID-ac4c-321h-tqfk
6
vulnerability VCID-e9k9-1s9f-dbgv
7
vulnerability VCID-ff2a-at5f-2qa8
8
vulnerability VCID-gfym-spzk-w7gk
9
vulnerability VCID-msge-1mfu-7qfa
10
vulnerability VCID-nda7-9219-6kce
11
vulnerability VCID-ssut-reka-r3f8
12
vulnerability VCID-ysyp-h7ja-yff3
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@6.0
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-4277.json
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-4277.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-4277
reference_id
reference_type
scores
0
value 0.00013
scoring_system epss
scoring_elements 0.01986
published_at 2026-04-09T12:55:00Z
1
value 0.00013
scoring_system epss
scoring_elements 0.0197
published_at 2026-04-08T12:55:00Z
2
value 0.0004
scoring_system epss
scoring_elements 0.12281
published_at 2026-04-12T12:55:00Z
3
value 0.0004
scoring_system epss
scoring_elements 0.12317
published_at 2026-04-11T12:55:00Z
4
value 0.00053
scoring_system epss
scoring_elements 0.16578
published_at 2026-04-13T12:55:00Z
5
value 0.00056
scoring_system epss
scoring_elements 0.17449
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-4277
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4277
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4277
3
reference_url https://docs.djangoproject.com/en/dev/releases/security
reference_id
reference_type
scores
0
value 2.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://docs.djangoproject.com/en/dev/releases/security
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://github.com/django/django
reference_id
reference_type
scores
0
value 2.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/django/django
6
reference_url https://groups.google.com/g/django-announce
reference_id
reference_type
scores
0
value 2.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://groups.google.com/g/django-announce
7
reference_url https://www.djangoproject.com/weblog/2026/apr/07/security-releases
reference_id
reference_type
scores
0
value 2.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://www.djangoproject.com/weblog/2026/apr/07/security-releases
8
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1132927
reference_id 1132927
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1132927
9
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2455939
reference_id 2455939
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2455939
10
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-4277
reference_id CVE-2026-4277
reference_type
scores
0
value 2.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-4277
11
reference_url https://github.com/advisories/GHSA-pwjp-ccjc-ghwg
reference_id GHSA-pwjp-ccjc-ghwg
reference_type
scores
0
value LOW
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-pwjp-ccjc-ghwg
12
reference_url https://usn.ubuntu.com/8154-1/
reference_id USN-8154-1
reference_type
scores
url https://usn.ubuntu.com/8154-1/
13
reference_url https://usn.ubuntu.com/8154-2/
reference_id USN-8154-2
reference_type
scores
url https://usn.ubuntu.com/8154-2/
Weaknesses
0
cwe_id 862
name Missing Authorization
description The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
1
cwe_id 639
name Authorization Bypass Through User-Controlled Key
description The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.
Exploits
Severity_range_score0.1 - 5.4
Exploitability0.5
Weighted_severity4.9
Risk_score2.5
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-gfym-spzk-w7gk