Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:alpm/archlinux/python-django@2.1.5-1
purl pkg:alpm/archlinux/python-django@2.1.5-1
Next non-vulnerable version 2.1.6-1
Latest non-vulnerable version 5.1.11-1
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-xaqg-mhqa-7keg
Aliases:
CVE-2019-6975
GHSA-wh4h-v3f2-r2pp
PYSEC-2019-18
Django 1.11.x before 1.11.19, 2.0.x before 2.0.11, and 2.1.x before 2.1.6 allows Uncontrolled Memory Consumption via a malicious attacker-supplied value to the django.utils.numberformat.format() function.
2.1.6-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-x664-bfna-6qdv In Django 1.11.x before 1.11.18, 2.0.x before 2.0.10, and 2.1.x before 2.1.5, an Improper Neutralization of Special Elements in Output Used by a Downstream Component issue exists in django.views.defaults.page_not_found(), leading to content spoofing (in a 404 error page) if a user fails to recognize that a crafted URL has malicious content. CVE-2019-3498
GHSA-337x-4q8g-prc5
PYSEC-2019-17

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T18:27:03.228196+00:00 Arch Linux Importer Fixing VCID-x664-bfna-6qdv https://security.archlinux.org/AVG-839 38.0.0
2026-04-01T18:27:02.756751+00:00 Arch Linux Importer Affected by VCID-xaqg-mhqa-7keg https://security.archlinux.org/AVG-881 38.0.0