Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:alpm/archlinux/python-django@3.2.10-1
purl pkg:alpm/archlinux/python-django@3.2.10-1
Next non-vulnerable version 4.0.2-1
Latest non-vulnerable version 5.1.11-1
Risk 4.0
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-gp5e-nguh-5fdk
Aliases:
BIT-django-2022-23833
CVE-2022-23833
GHSA-6cw3-g6wv-c2xv
PYSEC-2022-20
An issue was discovered in MultiPartParser in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2. Passing certain inputs to multipart forms could result in an infinite loop when parsing files.
4.0.2-1
Affected by 0 other vulnerabilities.
VCID-ume2-wt6y-jye7
Aliases:
BIT-django-2022-22818
CVE-2022-22818
GHSA-95rw-fx8r-36v6
PYSEC-2022-19
The {% debug %} template tag in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2 does not properly encode the current context. This may lead to XSS.
4.0.2-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-mzdk-m12w-q3fc In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, HTTP requests for URLs with trailing newlines could bypass upstream access control based on URL paths. BIT-django-2021-44420
CVE-2021-44420
GHSA-v6rh-hp5x-86rv
PYSEC-2021-439

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T18:27:15.404013+00:00 Arch Linux Importer Fixing VCID-mzdk-m12w-q3fc https://security.archlinux.org/AVG-2605 38.0.0
2026-04-01T18:24:08.961752+00:00 Arch Linux Importer Affected by VCID-ume2-wt6y-jye7 https://security.archlinux.org/AVG-2808 38.0.0
2026-04-01T18:24:08.937385+00:00 Arch Linux Importer Affected by VCID-gp5e-nguh-5fdk https://security.archlinux.org/AVG-2808 38.0.0