Search for packages
| purl | pkg:alpm/archlinux/python-django@4.0.2-1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-gp5e-nguh-5fdk | An issue was discovered in MultiPartParser in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2. Passing certain inputs to multipart forms could result in an infinite loop when parsing files. |
BIT-django-2022-23833
CVE-2022-23833 GHSA-6cw3-g6wv-c2xv PYSEC-2022-20 |
| VCID-ume2-wt6y-jye7 | The {% debug %} template tag in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2 does not properly encode the current context. This may lead to XSS. |
BIT-django-2022-22818
CVE-2022-22818 GHSA-95rw-fx8r-36v6 PYSEC-2022-19 |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T18:24:08.966236+00:00 | Arch Linux Importer | Fixing | VCID-ume2-wt6y-jye7 | https://security.archlinux.org/AVG-2808 | 38.0.0 |
| 2026-04-01T18:24:08.942136+00:00 | Arch Linux Importer | Fixing | VCID-gp5e-nguh-5fdk | https://security.archlinux.org/AVG-2808 | 38.0.0 |