Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:alpm/archlinux/python-django@5.1.9-1
purl pkg:alpm/archlinux/python-django@5.1.9-1
Next non-vulnerable version 5.1.11-1
Latest non-vulnerable version 5.1.11-1
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-896g-hqec-ryb9
Aliases:
BIT-django-2025-48432
CVE-2025-48432
GHSA-7xr5-9hcq-chf9
PYSEC-2025-47
An issue was discovered in Django 5.2 before 5.2.2, 5.1 before 5.1.10, and 4.2 before 4.2.22. Internal HTTP response logging does not escape request.path, which allows remote attackers to potentially manipulate log output via crafted URLs. This may lead to log injection or forgery when logs are viewed in terminals or processed by external systems.
5.1.11-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-9abh-apwm-ebab An issue was discovered in Django 4.2 before 4.2.21, 5.1 before 5.1.9, and 5.2 before 5.2.1. The django.utils.html.strip_tags() function is vulnerable to a potential denial-of-service (slow performance) when processing inputs containing large sequences of incomplete HTML tags. The template filter striptags is also vulnerable, because it is built on top of strip_tags(). BIT-django-2025-32873
CVE-2025-32873
GHSA-8j24-cjrq-gr2m
PYSEC-2025-37

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T18:27:15.125832+00:00 Arch Linux Importer Affected by VCID-896g-hqec-ryb9 https://security.archlinux.org/AVG-2894 38.0.0
2026-04-01T18:26:23.540349+00:00 Arch Linux Importer Fixing VCID-9abh-apwm-ebab https://security.archlinux.org/AVG-2876 38.0.0