Search for packages
| purl | pkg:ebuild/dev-python/django@1.8.3 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-a715-2qks-wyhn | The session backends in Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (session store consumption) via multiple requests with unique session keys. |
CVE-2015-5143
GHSA-h582-2pch-3xv3 PYSEC-2015-20 |
| VCID-sbr6-pybe-dubq | Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 uses an incorrect regular expression, which allows remote attackers to inject arbitrary headers and conduct HTTP response splitting attacks via a newline character in an (1) email message to the EmailValidator, a (2) URL to the URLValidator, or unspecified vectors to the (3) validate_ipv4_address or (4) validate_slug validator. |
CVE-2015-5144
GHSA-q5qw-4364-5hhm PYSEC-2015-10 |
| VCID-t8d7-68j2-suet | validators.URLValidator in Django 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors. |
CVE-2015-5145
GHSA-cqf7-ff9h-7967 PYSEC-2015-21 |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T13:02:26.182729+00:00 | Gentoo Importer | Fixing | VCID-t8d7-68j2-suet | https://security.gentoo.org/glsa/201510-06 | 38.0.0 |
| 2026-04-01T13:02:26.174217+00:00 | Gentoo Importer | Fixing | VCID-sbr6-pybe-dubq | https://security.gentoo.org/glsa/201510-06 | 38.0.0 |
| 2026-04-01T13:02:26.164964+00:00 | Gentoo Importer | Fixing | VCID-a715-2qks-wyhn | https://security.gentoo.org/glsa/201510-06 | 38.0.0 |