Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/django-ses@3.2.2
purl pkg:pypi/django-ses@3.2.2
Next non-vulnerable version 3.5.0
Latest non-vulnerable version 3.5.0
Risk
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-5dup-jv72-pkg5
Aliases:
CVE-2023-33185
GHSA-qg36-9jxh-fj25
GMS-2023-1622
PYSEC-2023-82
Django-SES is a drop-in mail backend for Django. The django_ses library implements a mail backend for Django using AWS Simple Email Service. The library exports the `SESEventWebhookView class` intended to receive signed requests from AWS to handle email bounces, subscriptions, etc. These requests are signed by AWS and are verified by django_ses, however the verification of this signature was found to be flawed as it allowed users to specify arbitrary public certificates. This issue was patched in version 3.5.0.
3.5.0
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-02T04:18:49.185997+00:00 Pypa Importer Affected by VCID-5dup-jv72-pkg5 https://github.com/pypa/advisory-database/blob/main/vulns/django-ses/PYSEC-2023-82.yaml 38.6.0