Staging Environment: Content and features may be unstable or change without notice.

Advisory Package Curation

GHSA-v6rh-hp5x-86rv

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-v6rh-hp5x-86rv

Potential bypass of an upstream access control based on URL paths in Django In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, HTTP requests for URLs with trailing newlines could bypass upstream access control based on URL paths. This issue has low severity, according to the Django security policy.

gitlab/pypi/Django/CVE-2021-44420

Potential bypass of an upstream access control based on URL paths in Django In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, HTTP requests for URLs with trailing newlines could bypass upstream access control based on URL paths. This issue has low severity, according to the Django security policy.

pypa/django/PYSEC-2021-439

In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, HTTP requests for URLs with trailing newlines could bypass upstream access control based on URL paths.

pysec/PYSEC-2021-439

In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, HTTP requests for URLs with trailing newlines could bypass upstream access control based on URL paths.