Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/django@1.3.0
purl pkg:pypi/django@1.3.0
Tags Ghost
Next non-vulnerable version 4.2.29
Latest non-vulnerable version 6.0.4
Risk 3.1
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-8yfq-hpqh-zqcp
Aliases:
CVE-2013-1665
GHSA-x64m-686f-fmm3
XML External Entity (XXE) in Django The XML libraries for Python as used in OpenStack Keystone Essex and Folsom, Django, and possibly other products allow remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, aka an XML External Entity (XXE) attack.
1.3.6
Affected by 31 other vulnerabilities.
1.4.4
Affected by 40 other vulnerabilities.
VCID-t88t-p8tx-cfcu
Aliases:
CVE-2013-1664
GHSA-qrh7-x6fp-c2mp
Multiple vulnerabilities have been found in libxml2, allowing remote attackers to execute arbitrary code or cause Denial of Service.
1.3.6
Affected by 31 other vulnerabilities.
1.4.4
Affected by 40 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-04T14:31:48.198705+00:00 GHSA Importer Affected by VCID-t88t-p8tx-cfcu https://github.com/advisories/GHSA-qrh7-x6fp-c2mp 38.1.0
2026-04-04T14:31:48.115062+00:00 GHSA Importer Affected by VCID-8yfq-hpqh-zqcp https://github.com/advisories/GHSA-x64m-686f-fmm3 38.1.0
2026-04-03T21:26:03.187681+00:00 GitLab Importer Affected by VCID-8yfq-hpqh-zqcp https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/Django/CVE-2013-1665.yml 38.1.0
2026-04-03T21:25:46.826747+00:00 GitLab Importer Affected by VCID-t88t-p8tx-cfcu https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/Django/CVE-2013-1664.yml 38.1.0