Search for packages
| purl | pkg:deb/debian/python-django@1.4.4-1?distro=trixie |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-8yfq-hpqh-zqcp | XML External Entity (XXE) in Django The XML libraries for Python as used in OpenStack Keystone Essex and Folsom, Django, and possibly other products allow remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, aka an XML External Entity (XXE) attack. |
CVE-2013-1665
GHSA-x64m-686f-fmm3 |
| VCID-cnnp-j1tv-7uhu | The form library in Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 allows remote attackers to bypass intended resource limits for formsets and cause a denial of service (memory consumption) or trigger server errors via a modified max_num parameter. |
CVE-2013-0306
GHSA-g8xg-jgj6-49r3 PYSEC-2013-17 |
| VCID-t3um-xpzf-23eg | The administrative interface for Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 does not check permissions for the history view, which allows remote authenticated administrators to obtain sensitive object history information. |
CVE-2013-0305
GHSA-r7w6-p47g-vj53 PYSEC-2013-16 |