Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:alpm/archlinux/python-django@4.0.7-1
purl pkg:alpm/archlinux/python-django@4.0.7-1
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-6gss-ppm5-3yc9 An issue was discovered in the HTTP FileResponse class in Django 3.2 before 3.2.15 and 4.0 before 4.0.7. An application is vulnerable to a reflected file download (RFD) attack that sets the Content-Disposition header of a FileResponse when the filename is derived from user-supplied input. BIT-django-2022-36359
CVE-2022-36359
GHSA-8x94-hmjh-97hq
PYSEC-2022-245

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T18:24:08.916403+00:00 Arch Linux Importer Fixing VCID-6gss-ppm5-3yc9 https://security.archlinux.org/AVG-2810 38.0.0