Search for packages
| purl | pkg:rpm/redhat/python-django20@2.0.13-18?arch=el8ost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-gp5e-nguh-5fdk
Aliases: BIT-django-2022-23833 CVE-2022-23833 GHSA-6cw3-g6wv-c2xv PYSEC-2022-20 |
An issue was discovered in MultiPartParser in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2. Passing certain inputs to multipart forms could result in an infinite loop when parsing files. | There are no reported fixed by versions. |
|
VCID-pa75-6avj-duf7
Aliases: BIT-django-2022-28346 CVE-2022-28346 GHSA-2gwj-7jmv-h26r PYSEC-2022-190 |
An issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. QuerySet.annotate(), aggregate(), and extra() methods are subject to SQL injection in column aliases via a crafted dictionary (with dictionary expansion) as the passed **kwargs. | There are no reported fixed by versions. |
|
VCID-ume2-wt6y-jye7
Aliases: BIT-django-2022-22818 CVE-2022-22818 GHSA-95rw-fx8r-36v6 PYSEC-2022-19 |
The {% debug %} template tag in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2 does not properly encode the current context. This may lead to XSS. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T13:59:45.830156+00:00 | RedHat Importer | Affected by | VCID-gp5e-nguh-5fdk | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-23833.json | 38.0.0 |
| 2026-04-01T13:59:45.757504+00:00 | RedHat Importer | Affected by | VCID-ume2-wt6y-jye7 | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-22818.json | 38.0.0 |
| 2026-04-01T13:58:59.470179+00:00 | RedHat Importer | Affected by | VCID-pa75-6avj-duf7 | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-28346.json | 38.0.0 |