Search for packages
| purl | pkg:rpm/redhat/python-django-tagging@0.4.6-1?arch=el7rhgs |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 3.1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-1fs3-2msx-9kev
Aliases: CVE-2018-14574 GHSA-5hg3-6c2f-f3wr PYSEC-2018-2 |
django.middleware.common.CommonMiddleware in Django 1.11.x before 1.11.15 and 2.0.x before 2.0.8 has an Open Redirect. | There are no reported fixed by versions. |
|
VCID-jae8-w85w-cyfu
Aliases: CVE-2018-7537 GHSA-2f9x-5v75-3qv4 PYSEC-2018-6 |
An issue was discovered in Django 2.0 before 2.0.3, 1.11 before 1.11.11, and 1.8 before 1.8.19. If django.utils.text.Truncator's chars() and words() methods were passed the html=True argument, they were extremely slow to evaluate certain inputs due to a catastrophic backtracking vulnerability in a regular expression. The chars() and words() methods are used to implement the truncatechars_html and truncatewords_html template filters, which were thus vulnerable. | There are no reported fixed by versions. |
|
VCID-mv1p-yxvp-pbh6
Aliases: CVE-2018-7536 GHSA-r28v-mw67-m5p9 PYSEC-2018-5 |
An issue was discovered in Django 2.0 before 2.0.3, 1.11 before 1.11.11, and 1.8 before 1.8.19. The django.utils.html.urlize() function was extremely slow to evaluate certain inputs due to catastrophic backtracking vulnerabilities in two regular expressions (only one regular expression for Django 1.8.x). The urlize() function is used to implement the urlize and urlizetrunc template filters, which were thus vulnerable. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T14:25:55.092467+00:00 | RedHat Importer | Affected by | VCID-jae8-w85w-cyfu | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7537.json | 38.0.0 |
| 2026-04-01T14:25:51.981980+00:00 | RedHat Importer | Affected by | VCID-mv1p-yxvp-pbh6 | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7536.json | 38.0.0 |
| 2026-04-01T14:22:54.326906+00:00 | RedHat Importer | Affected by | VCID-1fs3-2msx-9kev | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14574.json | 38.0.0 |