Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/python-django@3:3.2.15-1?distro=trixie
purl pkg:deb/debian/python-django@3:3.2.15-1?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-6gss-ppm5-3yc9 An issue was discovered in the HTTP FileResponse class in Django 3.2 before 3.2.15 and 4.0 before 4.0.7. An application is vulnerable to a reflected file download (RFD) attack that sets the Content-Disposition header of a FileResponse when the filename is derived from user-supplied input. BIT-django-2022-36359
CVE-2022-36359
GHSA-8x94-hmjh-97hq
PYSEC-2022-245

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T08:37:55.350541+00:00 Debian Importer Fixing VCID-6gss-ppm5-3yc9 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-11T17:48:17.965827+00:00 Debian Importer Fixing VCID-6gss-ppm5-3yc9 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:50:43.914033+00:00 Debian Importer Fixing VCID-6gss-ppm5-3yc9 https://security-tracker.debian.org/tracker/data/json 38.1.0