Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/python-django@2:2.2.22-1?distro=trixie
purl pkg:deb/debian/python-django@2:2.2.22-1?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-v4ad-xxy8-wfc9 In Django 2.2 before 2.2.22, 3.1 before 3.1.10, and 3.2 before 3.2.2 (with Python 3.9.5+), URLValidator does not prohibit newlines and tabs (unless the URLField form field is used). If an application uses values with newlines in an HTTP response, header injection can occur. Django itself is unaffected because HttpResponse prohibits newlines in HTTP headers. BIT-django-2021-32052
CVE-2021-32052
GHSA-qm57-vhq3-3fwf
PYSEC-2021-8

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T08:46:45.001403+00:00 Debian Importer Fixing VCID-v4ad-xxy8-wfc9 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-11T17:53:47.667539+00:00 Debian Importer Fixing VCID-v4ad-xxy8-wfc9 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:50:43.161931+00:00 Debian Importer Fixing VCID-v4ad-xxy8-wfc9 https://security-tracker.debian.org/tracker/data/json 38.1.0