VulnerableCode Package Details - pkg:alpm/archlinux/python-django@3.1.6-1

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:alpm/archlinux/python-django@3.1.6-1

Essentials
History (2)

purl	pkg:alpm/archlinux/python-django@3.1.6-1

Next non-vulnerable version	3.2.2-1
Latest non-vulnerable version	5.1.11-1
Risk	3.1

Vulnerabilities affecting this package (1)

Vulnerability	Summary	Fixed by
VCID-w6k8-js68-87g4 Aliases: CVE-2021-23336	Multiple vulnerabilities have been found in Python, the worst of which might allow attackers to access sensitive information.	3.1.7-1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}

Vulnerabilities fixed by this package (1)

Vulnerability	Summary	Aliases
VCID-9k9t-vp1a-z7bt	In Django 2.2 before 2.2.18, 3.0 before 3.0.12, and 3.1 before 3.1.6, the django.utils.archive.extract method (used by "startapp --template" and "startproject --template") allows directory traversal via an archive with absolute paths or relative paths with dot segments.	BIT-django-2021-3281 CVE-2021-3281 GHSA-fvgf-6h6h-3322 PYSEC-2021-9

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-04-01T18:27:19.879977+00:00	Arch Linux Importer	Fixing	VCID-9k9t-vp1a-z7bt	https://security.archlinux.org/AVG-1518	38.0.0
2026-04-01T18:26:54.284702+00:00	Arch Linux Importer	Affected by	VCID-w6k8-js68-87g4	https://security.archlinux.org/AVG-1593	38.0.0