VulnerableCode Package Details - pkg:alpm/archlinux/python-django@3.1.5-1

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:alpm/archlinux/python-django@3.1.5-1

Essentials
History (1)

purl	pkg:alpm/archlinux/python-django@3.1.5-1

Next non-vulnerable version	3.2.2-1
Latest non-vulnerable version	5.1.11-1
Risk	3.1

Vulnerabilities affecting this package (1)

Vulnerability	Summary	Fixed by
VCID-9k9t-vp1a-z7bt Aliases: BIT-django-2021-3281 CVE-2021-3281 GHSA-fvgf-6h6h-3322 PYSEC-2021-9	In Django 2.2 before 2.2.18, 3.0 before 3.0.12, and 3.1 before 3.1.6, the django.utils.archive.extract method (used by "startapp --template" and "startproject --template") allows directory traversal via an archive with absolute paths or relative paths with dot segments.	3.1.6-1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}

Vulnerabilities fixed by this package (0)

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-04-01T18:27:19.875921+00:00	Arch Linux Importer	Affected by	VCID-9k9t-vp1a-z7bt	https://security.archlinux.org/AVG-1518	38.0.0