Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/9370?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/9370?format=api", "vulnerability_id": "VCID-a3e2-se1v-2yb5", "summary": "An issue was discovered in Django 5.1 before 5.1.8 and 5.0 before 5.0.14. The NFKC normalization is slow on Windows. As a consequence, django.contrib.auth.views.LoginView, django.contrib.auth.views.LogoutView, and django.views.i18n.set_language are subject to a potential denial-of-service attack via certain inputs with a very large number of Unicode characters.", "aliases": [ { "alias": "BIT-django-2025-27556" }, { "alias": "CVE-2025-27556" }, { "alias": "GHSA-wqfg-m96j-85vm" }, { "alias": "PYSEC-2025-14" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/203806?format=api", "purl": "pkg:deb/debian/python-django@0?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@0%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/203793?format=api", "purl": "pkg:deb/debian/python-django@2:2.2.28-1~deb11u2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-32d1-b8f2-hud5" }, { "vulnerability": "VCID-3ccr-92q5-aqfk" }, { "vulnerability": "VCID-63c7-mkxw-ufav" }, { "vulnerability": "VCID-92z2-3rbz-77h9" }, { "vulnerability": "VCID-ape9-66ck-nfez" }, { "vulnerability": "VCID-cg44-thdw-cygg" }, { "vulnerability": "VCID-dac4-fa2z-bkdq" }, { "vulnerability": "VCID-g22z-jue5-8udz" }, { "vulnerability": "VCID-heum-8mwz-sbcw" }, { "vulnerability": "VCID-j2uz-w2ur-7ud4" }, { "vulnerability": "VCID-jt9m-kd3k-uqca" }, { "vulnerability": "VCID-q4cv-2m7d-3qd5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@2:2.2.28-1~deb11u2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/203791?format=api", "purl": "pkg:deb/debian/python-django@3:3.2.25-0%2Bdeb12u2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-32d1-b8f2-hud5" }, { "vulnerability": "VCID-3ccr-92q5-aqfk" }, { "vulnerability": "VCID-63c7-mkxw-ufav" }, { "vulnerability": "VCID-92z2-3rbz-77h9" }, { "vulnerability": "VCID-ape9-66ck-nfez" }, { "vulnerability": "VCID-cg44-thdw-cygg" }, { "vulnerability": "VCID-dac4-fa2z-bkdq" }, { "vulnerability": "VCID-g22z-jue5-8udz" }, { "vulnerability": "VCID-heum-8mwz-sbcw" }, { "vulnerability": "VCID-j2uz-w2ur-7ud4" }, { "vulnerability": "VCID-jt9m-kd3k-uqca" }, { "vulnerability": "VCID-q4cv-2m7d-3qd5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:3.2.25-0%252Bdeb12u2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/203796?format=api", "purl": "pkg:deb/debian/python-django@3:4.2.28-0%2Bdeb13u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-32d1-b8f2-hud5" }, { "vulnerability": "VCID-3ccr-92q5-aqfk" }, { "vulnerability": "VCID-63c7-mkxw-ufav" }, { "vulnerability": "VCID-92z2-3rbz-77h9" }, { "vulnerability": "VCID-cg44-thdw-cygg" }, { "vulnerability": "VCID-dac4-fa2z-bkdq" }, { "vulnerability": "VCID-g22z-jue5-8udz" }, { "vulnerability": "VCID-heum-8mwz-sbcw" }, { "vulnerability": "VCID-j2uz-w2ur-7ud4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:4.2.28-0%252Bdeb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/203794?format=api", "purl": "pkg:deb/debian/python-django@3:4.2.30-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3ccr-92q5-aqfk" }, { "vulnerability": "VCID-92z2-3rbz-77h9" }, { "vulnerability": "VCID-g22z-jue5-8udz" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:4.2.30-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/203795?format=api", "purl": "pkg:deb/debian/python-django@3:5.2.14-2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:5.2.14-2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/43628?format=api", "purl": "pkg:pypi/django@5.0.14", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.0.14" }, { "url": "http://public2.vulnerablecode.io/api/packages/43627?format=api", "purl": "pkg:pypi/django@5.1.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3d6k-rdsh-k7hm" }, { "vulnerability": "VCID-7jbt-5zw2-vff2" }, { "vulnerability": "VCID-9udu-eqvn-mqbj" }, { "vulnerability": "VCID-ax7m-uv4s-zkc1" }, { "vulnerability": "VCID-em3c-ceug-cubp" }, { "vulnerability": "VCID-fbee-vj2y-cfeb" }, { "vulnerability": "VCID-u15a-4ste-43cy" }, { "vulnerability": "VCID-vpgq-jhzc-j7h2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.1.8" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/38479?format=api", "purl": "pkg:pypi/django@5.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1c7j-evpp-53eb" }, { "vulnerability": "VCID-1umb-2rxg-bbdk" }, { "vulnerability": "VCID-4vry-9jdm-nyg9" }, { "vulnerability": "VCID-68nb-696n-n3bf" }, { "vulnerability": "VCID-a3e2-se1v-2yb5" }, { "vulnerability": "VCID-ape9-66ck-nfez" }, { "vulnerability": "VCID-ax42-esfz-vud2" }, { "vulnerability": "VCID-bjn5-qpmt-qffx" }, { "vulnerability": "VCID-bq5s-uknu-z7cn" }, { "vulnerability": "VCID-chey-b3c1-pbe5" }, { "vulnerability": "VCID-jt9m-kd3k-uqca" }, { "vulnerability": "VCID-kv5d-p5n4-r7dp" }, { "vulnerability": "VCID-nyc2-p1rp-xkb4" }, { "vulnerability": "VCID-q4cv-2m7d-3qd5" }, { "vulnerability": "VCID-sz4x-rr8f-a3hf" }, { "vulnerability": "VCID-vm2w-caad-nyd3" }, { "vulnerability": "VCID-x4s4-qav9-xbet" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/38480?format=api", "purl": "pkg:pypi/django@5.0.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1c7j-evpp-53eb" }, { "vulnerability": "VCID-1umb-2rxg-bbdk" }, { "vulnerability": "VCID-4vry-9jdm-nyg9" }, { "vulnerability": "VCID-68nb-696n-n3bf" }, { "vulnerability": "VCID-a3e2-se1v-2yb5" }, { "vulnerability": "VCID-ape9-66ck-nfez" }, { "vulnerability": "VCID-bjn5-qpmt-qffx" }, { "vulnerability": "VCID-bq5s-uknu-z7cn" }, { "vulnerability": "VCID-chey-b3c1-pbe5" }, { "vulnerability": "VCID-jt9m-kd3k-uqca" }, { "vulnerability": "VCID-kv5d-p5n4-r7dp" }, { "vulnerability": "VCID-nyc2-p1rp-xkb4" }, { "vulnerability": "VCID-q4cv-2m7d-3qd5" }, { "vulnerability": "VCID-sz4x-rr8f-a3hf" }, { "vulnerability": "VCID-vm2w-caad-nyd3" }, { "vulnerability": "VCID-x4s4-qav9-xbet" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.0.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/38483?format=api", "purl": "pkg:pypi/django@5.0.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1c7j-evpp-53eb" }, { "vulnerability": "VCID-1umb-2rxg-bbdk" }, { "vulnerability": "VCID-4vry-9jdm-nyg9" }, { "vulnerability": "VCID-68nb-696n-n3bf" }, { "vulnerability": "VCID-a3e2-se1v-2yb5" }, { "vulnerability": "VCID-ape9-66ck-nfez" }, { "vulnerability": "VCID-bjn5-qpmt-qffx" }, { "vulnerability": "VCID-bq5s-uknu-z7cn" }, { "vulnerability": "VCID-chey-b3c1-pbe5" }, { "vulnerability": "VCID-jt9m-kd3k-uqca" }, { "vulnerability": "VCID-kv5d-p5n4-r7dp" }, { "vulnerability": "VCID-nyc2-p1rp-xkb4" }, { "vulnerability": "VCID-q4cv-2m7d-3qd5" }, { "vulnerability": "VCID-sz4x-rr8f-a3hf" }, { "vulnerability": "VCID-vm2w-caad-nyd3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.0.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/39560?format=api", "purl": "pkg:pypi/django@5.0.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1c7j-evpp-53eb" }, { "vulnerability": "VCID-1umb-2rxg-bbdk" }, { "vulnerability": "VCID-4vry-9jdm-nyg9" }, { "vulnerability": "VCID-68nb-696n-n3bf" }, { "vulnerability": "VCID-a3e2-se1v-2yb5" }, { "vulnerability": "VCID-ape9-66ck-nfez" }, { "vulnerability": "VCID-bq5s-uknu-z7cn" }, { "vulnerability": "VCID-chey-b3c1-pbe5" }, { "vulnerability": "VCID-jt9m-kd3k-uqca" }, { "vulnerability": "VCID-kv5d-p5n4-r7dp" }, { "vulnerability": "VCID-nyc2-p1rp-xkb4" }, { "vulnerability": "VCID-q4cv-2m7d-3qd5" }, { "vulnerability": "VCID-sz4x-rr8f-a3hf" }, { "vulnerability": "VCID-vm2w-caad-nyd3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.0.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/40733?format=api", "purl": "pkg:pypi/django@5.0.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1c7j-evpp-53eb" }, { "vulnerability": "VCID-1umb-2rxg-bbdk" }, { "vulnerability": "VCID-4vry-9jdm-nyg9" }, { "vulnerability": "VCID-68nb-696n-n3bf" }, { "vulnerability": "VCID-a3e2-se1v-2yb5" }, { "vulnerability": "VCID-ape9-66ck-nfez" }, { "vulnerability": "VCID-bq5s-uknu-z7cn" }, { "vulnerability": "VCID-chey-b3c1-pbe5" }, { "vulnerability": "VCID-jt9m-kd3k-uqca" }, { "vulnerability": "VCID-kv5d-p5n4-r7dp" }, { "vulnerability": "VCID-nyc2-p1rp-xkb4" }, { "vulnerability": "VCID-q4cv-2m7d-3qd5" }, { "vulnerability": "VCID-sz4x-rr8f-a3hf" }, { "vulnerability": "VCID-vm2w-caad-nyd3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.0.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/40734?format=api", "purl": "pkg:pypi/django@5.0.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1c7j-evpp-53eb" }, { "vulnerability": "VCID-1umb-2rxg-bbdk" }, { "vulnerability": "VCID-4vry-9jdm-nyg9" }, { "vulnerability": "VCID-68nb-696n-n3bf" }, { "vulnerability": "VCID-a3e2-se1v-2yb5" }, { "vulnerability": "VCID-ape9-66ck-nfez" }, { "vulnerability": "VCID-bq5s-uknu-z7cn" }, { "vulnerability": "VCID-chey-b3c1-pbe5" }, { "vulnerability": "VCID-jt9m-kd3k-uqca" }, { "vulnerability": "VCID-kv5d-p5n4-r7dp" }, { "vulnerability": "VCID-nyc2-p1rp-xkb4" }, { "vulnerability": "VCID-q4cv-2m7d-3qd5" }, { "vulnerability": "VCID-sz4x-rr8f-a3hf" }, { "vulnerability": "VCID-vm2w-caad-nyd3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.0.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/40735?format=api", "purl": "pkg:pypi/django@5.0.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1c7j-evpp-53eb" }, { "vulnerability": "VCID-1umb-2rxg-bbdk" }, { "vulnerability": "VCID-4vry-9jdm-nyg9" }, { "vulnerability": "VCID-68nb-696n-n3bf" }, { "vulnerability": "VCID-a3e2-se1v-2yb5" }, { "vulnerability": "VCID-ape9-66ck-nfez" }, { "vulnerability": "VCID-bq5s-uknu-z7cn" }, { "vulnerability": "VCID-chey-b3c1-pbe5" }, { "vulnerability": "VCID-jt9m-kd3k-uqca" }, { "vulnerability": "VCID-kv5d-p5n4-r7dp" }, { "vulnerability": "VCID-nyc2-p1rp-xkb4" }, { "vulnerability": "VCID-q4cv-2m7d-3qd5" }, { "vulnerability": "VCID-sz4x-rr8f-a3hf" }, { "vulnerability": "VCID-vm2w-caad-nyd3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.0.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/40736?format=api", "purl": "pkg:pypi/django@5.0.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1umb-2rxg-bbdk" }, { "vulnerability": "VCID-4vry-9jdm-nyg9" }, { "vulnerability": "VCID-68nb-696n-n3bf" }, { "vulnerability": "VCID-a3e2-se1v-2yb5" }, { "vulnerability": "VCID-bq5s-uknu-z7cn" }, { "vulnerability": "VCID-chey-b3c1-pbe5" }, { "vulnerability": "VCID-jt9m-kd3k-uqca" }, { "vulnerability": "VCID-nyc2-p1rp-xkb4" }, { "vulnerability": "VCID-q4cv-2m7d-3qd5" }, { "vulnerability": "VCID-vm2w-caad-nyd3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.0.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/41019?format=api", "purl": "pkg:pypi/django@5.0.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1umb-2rxg-bbdk" }, { "vulnerability": "VCID-4vry-9jdm-nyg9" }, { "vulnerability": "VCID-a3e2-se1v-2yb5" }, { "vulnerability": "VCID-chey-b3c1-pbe5" }, { "vulnerability": "VCID-jt9m-kd3k-uqca" }, { "vulnerability": "VCID-nyc2-p1rp-xkb4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.0.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/42455?format=api", "purl": "pkg:pypi/django@5.0.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1umb-2rxg-bbdk" }, { "vulnerability": "VCID-4vry-9jdm-nyg9" }, { "vulnerability": "VCID-a3e2-se1v-2yb5" }, { "vulnerability": "VCID-chey-b3c1-pbe5" }, { "vulnerability": "VCID-nyc2-p1rp-xkb4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.0.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/43092?format=api", "purl": "pkg:pypi/django@5.0.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-a3e2-se1v-2yb5" }, { "vulnerability": "VCID-chey-b3c1-pbe5" }, { "vulnerability": "VCID-nyc2-p1rp-xkb4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.0.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/43226?format=api", "purl": "pkg:pypi/django@5.0.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-a3e2-se1v-2yb5" }, { "vulnerability": "VCID-nyc2-p1rp-xkb4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.0.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/43492?format=api", "purl": "pkg:pypi/django@5.0.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-a3e2-se1v-2yb5" }, { "vulnerability": "VCID-nyc2-p1rp-xkb4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.0.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/43495?format=api", "purl": "pkg:pypi/django@5.0.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-a3e2-se1v-2yb5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.0.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/42453?format=api", "purl": "pkg:pypi/django@5.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1umb-2rxg-bbdk" }, { "vulnerability": "VCID-3d6k-rdsh-k7hm" }, { "vulnerability": "VCID-4vry-9jdm-nyg9" }, { "vulnerability": "VCID-7jbt-5zw2-vff2" }, { "vulnerability": "VCID-9udu-eqvn-mqbj" }, { "vulnerability": "VCID-a3e2-se1v-2yb5" }, { "vulnerability": "VCID-ax42-esfz-vud2" }, { "vulnerability": "VCID-ax7m-uv4s-zkc1" }, { "vulnerability": "VCID-chey-b3c1-pbe5" }, { "vulnerability": "VCID-em3c-ceug-cubp" }, { "vulnerability": "VCID-fbee-vj2y-cfeb" }, { "vulnerability": "VCID-jt9m-kd3k-uqca" }, { "vulnerability": "VCID-nyc2-p1rp-xkb4" }, { "vulnerability": "VCID-u15a-4ste-43cy" }, { "vulnerability": "VCID-vpgq-jhzc-j7h2" }, { "vulnerability": "VCID-xmq2-18at-y3gj" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/42454?format=api", "purl": "pkg:pypi/django@5.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1umb-2rxg-bbdk" }, { "vulnerability": "VCID-3d6k-rdsh-k7hm" }, { "vulnerability": "VCID-4vry-9jdm-nyg9" }, { "vulnerability": "VCID-7jbt-5zw2-vff2" }, { "vulnerability": "VCID-9udu-eqvn-mqbj" }, { "vulnerability": "VCID-a3e2-se1v-2yb5" }, { "vulnerability": "VCID-ax7m-uv4s-zkc1" }, { "vulnerability": "VCID-chey-b3c1-pbe5" }, { "vulnerability": "VCID-em3c-ceug-cubp" }, { "vulnerability": "VCID-fbee-vj2y-cfeb" }, { "vulnerability": "VCID-nyc2-p1rp-xkb4" }, { "vulnerability": "VCID-u15a-4ste-43cy" }, { "vulnerability": "VCID-vpgq-jhzc-j7h2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.1.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/43089?format=api", "purl": "pkg:pypi/django@5.1.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1umb-2rxg-bbdk" }, { "vulnerability": "VCID-3d6k-rdsh-k7hm" }, { "vulnerability": "VCID-4vry-9jdm-nyg9" }, { "vulnerability": "VCID-7jbt-5zw2-vff2" }, { "vulnerability": "VCID-9udu-eqvn-mqbj" }, { "vulnerability": "VCID-a3e2-se1v-2yb5" }, { "vulnerability": "VCID-ax7m-uv4s-zkc1" }, { "vulnerability": "VCID-chey-b3c1-pbe5" }, { "vulnerability": "VCID-em3c-ceug-cubp" }, { "vulnerability": "VCID-fbee-vj2y-cfeb" }, { "vulnerability": "VCID-nyc2-p1rp-xkb4" }, { "vulnerability": "VCID-u15a-4ste-43cy" }, { "vulnerability": "VCID-vpgq-jhzc-j7h2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.1.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/43090?format=api", "purl": "pkg:pypi/django@5.1.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1umb-2rxg-bbdk" }, { "vulnerability": "VCID-3d6k-rdsh-k7hm" }, { "vulnerability": "VCID-4vry-9jdm-nyg9" }, { "vulnerability": "VCID-7jbt-5zw2-vff2" }, { "vulnerability": "VCID-9udu-eqvn-mqbj" }, { "vulnerability": "VCID-a3e2-se1v-2yb5" }, { "vulnerability": "VCID-ax7m-uv4s-zkc1" }, { "vulnerability": "VCID-chey-b3c1-pbe5" }, { "vulnerability": "VCID-em3c-ceug-cubp" }, { "vulnerability": "VCID-fbee-vj2y-cfeb" }, { "vulnerability": "VCID-nyc2-p1rp-xkb4" }, { "vulnerability": "VCID-u15a-4ste-43cy" }, { "vulnerability": "VCID-vpgq-jhzc-j7h2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.1.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/43091?format=api", "purl": "pkg:pypi/django@5.1.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3d6k-rdsh-k7hm" }, { "vulnerability": "VCID-7jbt-5zw2-vff2" }, { "vulnerability": "VCID-9udu-eqvn-mqbj" }, { "vulnerability": "VCID-a3e2-se1v-2yb5" }, { "vulnerability": "VCID-ax7m-uv4s-zkc1" }, { "vulnerability": "VCID-chey-b3c1-pbe5" }, { "vulnerability": "VCID-em3c-ceug-cubp" }, { "vulnerability": "VCID-fbee-vj2y-cfeb" }, { "vulnerability": "VCID-nyc2-p1rp-xkb4" }, { "vulnerability": "VCID-u15a-4ste-43cy" }, { "vulnerability": "VCID-vpgq-jhzc-j7h2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.1.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/43225?format=api", "purl": "pkg:pypi/django@5.1.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3d6k-rdsh-k7hm" }, { "vulnerability": "VCID-7jbt-5zw2-vff2" }, { "vulnerability": "VCID-9udu-eqvn-mqbj" }, { "vulnerability": "VCID-a3e2-se1v-2yb5" }, { "vulnerability": "VCID-ax7m-uv4s-zkc1" }, { "vulnerability": "VCID-em3c-ceug-cubp" }, { "vulnerability": "VCID-fbee-vj2y-cfeb" }, { "vulnerability": "VCID-nyc2-p1rp-xkb4" }, { "vulnerability": "VCID-u15a-4ste-43cy" }, { "vulnerability": "VCID-vpgq-jhzc-j7h2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.1.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/43493?format=api", "purl": "pkg:pypi/django@5.1.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3d6k-rdsh-k7hm" }, { "vulnerability": "VCID-7jbt-5zw2-vff2" }, { "vulnerability": "VCID-9udu-eqvn-mqbj" }, { "vulnerability": "VCID-a3e2-se1v-2yb5" }, { "vulnerability": "VCID-ax7m-uv4s-zkc1" }, { "vulnerability": "VCID-em3c-ceug-cubp" }, { "vulnerability": "VCID-fbee-vj2y-cfeb" }, { "vulnerability": "VCID-nyc2-p1rp-xkb4" }, { "vulnerability": "VCID-u15a-4ste-43cy" }, { "vulnerability": "VCID-vpgq-jhzc-j7h2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.1.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/43494?format=api", "purl": "pkg:pypi/django@5.1.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3d6k-rdsh-k7hm" }, { "vulnerability": "VCID-7jbt-5zw2-vff2" }, { "vulnerability": "VCID-9udu-eqvn-mqbj" }, { "vulnerability": "VCID-a3e2-se1v-2yb5" }, { "vulnerability": "VCID-ax7m-uv4s-zkc1" }, { "vulnerability": "VCID-em3c-ceug-cubp" }, { "vulnerability": "VCID-fbee-vj2y-cfeb" }, { "vulnerability": "VCID-u15a-4ste-43cy" }, { "vulnerability": "VCID-vpgq-jhzc-j7h2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.1.7" } ], "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-27556.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-27556.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-27556", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00011", "scoring_system": "epss", "scoring_elements": "0.01482", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-27556" }, { "reference_url": "https://docs.djangoproject.com/en/dev/releases/security", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://docs.djangoproject.com/en/dev/releases/security" }, { "reference_url": "https://docs.djangoproject.com/en/dev/releases/security/", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-02T13:21:14Z/" } ], "url": "https://docs.djangoproject.com/en/dev/releases/security/" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/django/django", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/django/django" }, { "reference_url": "https://github.com/django/django/commit/2cb311f7b069723027fb5def4044d1816d7d2afd", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/django/django/commit/2cb311f7b069723027fb5def4044d1816d7d2afd" }, { "reference_url": "https://github.com/django/django/commit/39e2297210d9d2938c75fc911d45f0e863dc4821", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/django/django/commit/39e2297210d9d2938c75fc911d45f0e863dc4821" }, { "reference_url": "https://github.com/django/django/commit/8c6871b097b6c49d2a782c0d80d908bcbe2116f1", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/django/django/commit/8c6871b097b6c49d2a782c0d80d908bcbe2116f1" }, { "reference_url": "https://github.com/django/django/commit/edc2716d01a6fdd84b173c02031695231bcee1f8", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/django/django/commit/edc2716d01a6fdd84b173c02031695231bcee1f8" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2025-14.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2025-14.yaml" }, { "reference_url": "https://groups.google.com/g/django-announce", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-02T13:21:14Z/" } ], "url": "https://groups.google.com/g/django-announce" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-27556", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-27556" }, { "reference_url": "https://www.djangoproject.com/weblog/2025/apr/02/security-releases", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.djangoproject.com/weblog/2025/apr/02/security-releases" }, { "reference_url": "https://www.djangoproject.com/weblog/2025/apr/02/security-releases/", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-02T13:21:14Z/" } ], "url": "https://www.djangoproject.com/weblog/2025/apr/02/security-releases/" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2025/04/02/2", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2025/04/02/2" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2356899", "reference_id": "2356899", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2356899" } ], "weaknesses": [ { "cwe_id": 770, "name": "Allocation of Resources Without Limits or Throttling", "description": "The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor." } ], "exploits": [], "severity_range_score": "4.0 - 6.9", "exploitability": "0.5", "weighted_severity": "5.2", "risk_score": 2.6, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-a3e2-se1v-2yb5" }