{"url":"http://public2.vulnerablecode.io/api/packages/124803?format=json","purl":"pkg:deb/debian/python-django@1.6.5-1?distro=trixie","type":"deb","namespace":"debian","name":"python-django","version":"1.6.5-1","qualifiers":{"distro":"trixie"},"subpath":"","is_vulnerable":false,"next_non_vulnerable_version":"1.6.6-1","latest_non_vulnerable_version":"3:5.2.15-1","affected_by_vulnerabilities":[],"fixing_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/34879?format=json","vulnerability_id":"VCID-71t1-69yq-c7h6","summary":"Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly include the (1) Vary: Cookie or (2) Cache-Control header in responses, which allows remote attackers to obtain sensitive information or poison the cache via a request from certain browsers.","references":[{"reference_url":"http://lists.opensuse.org/opensuse-updates/2014-09/msg00023.html","reference_id":"","reference_type":"","scores":[{"value":"7.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"},{"value":"9.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://lists.opensuse.org/opensuse-updates/2014-09/msg00023.html"},{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1418.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1418.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2014-1418","reference_id":"","reference_type":"","scores":[{"value":"0.00512","scoring_system":"epss","scoring_elements":"0.66847","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00512","scoring_system":"epss","scoring_elements":"0.66887","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2014-1418"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0472","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0472"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0473","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0473"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0474","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0474"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1418","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1418"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3730","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3730"},{"reference_url":"http://secunia.com/advisories/61281","reference_id":"","reference_type":"","scores":[],"url":"http://secunia.com/advisories/61281"},{"reference_url":"https://github.com/django/django","reference_id":"","reference_type":"","scores":[{"value":"7.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"},{"value":"9.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/django/django"},{"reference_url":"https://github.com/django/django/commit/1abcf3a808b35abae5d425ed4d44cb6e886dc769","reference_id":"","reference_type":"","scores":[{"value":"7.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"},{"value":"9.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/django/django/commit/1abcf3a808b35abae5d425ed4d44cb6e886dc769"},{"reference_url":"https://github.com/django/django/commit/28e23306aa53bbbb8fb87db85f99d970b051026c","reference_id":"","reference_type":"","scores":[{"value":"7.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"},{"value":"9.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/django/django/commit/28e23306aa53bbbb8fb87db85f99d970b051026c"},{"reference_url":"https://github.com/django/django/commit/4001ec8698f577b973c5a540801d8a0bbea1205b","reference_id":"","reference_type":"","scores":[{"value":"7.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"},{"value":"9.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/django/django/commit/4001ec8698f577b973c5a540801d8a0bbea1205b"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2014-19.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"},{"value":"9.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2014-19.yaml"},{"reference_url":"https://www.djangoproject.com/weblog/2014/may/14/security-releases-issued","reference_id":"","reference_type":"","scores":[{"value":"7.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"},{"value":"9.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.djangoproject.com/weblog/2014/may/14/security-releases-issued"},{"reference_url":"https://www.djangoproject.com/weblog/2014/may/14/security-releases-issued/","reference_id":"","reference_type":"","scores":[],"url":"https://www.djangoproject.com/weblog/2014/may/14/security-releases-issued/"},{"reference_url":"http://ubuntu.com/usn/usn-2212-1","reference_id":"","reference_type":"","scores":[{"value":"7.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"},{"value":"9.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://ubuntu.com/usn/usn-2212-1"},{"reference_url":"http://www.debian.org/security/2014/dsa-2934","reference_id":"","reference_type":"","scores":[{"value":"7.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"},{"value":"9.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://www.debian.org/security/2014/dsa-2934"},{"reference_url":"http://www.openwall.com/lists/oss-security/2014/05/14/10","reference_id":"","reference_type":"","scores":[{"value":"7.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"},{"value":"9.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://www.openwall.com/lists/oss-security/2014/05/14/10"},{"reference_url":"http://www.openwall.com/lists/oss-security/2014/05/15/3","reference_id":"","reference_type":"","scores":[{"value":"7.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"},{"value":"9.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://www.openwall.com/lists/oss-security/2014/05/15/3"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1097500","reference_id":"1097500","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1097500"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2014-1418","reference_id":"CVE-2014-1418","reference_type":"","scores":[{"value":"7.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"},{"value":"9.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-1418"},{"reference_url":"https://github.com/advisories/GHSA-q7q2-qf2q-rw3w","reference_id":"GHSA-q7q2-qf2q-rw3w","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-q7q2-qf2q-rw3w"},{"reference_url":"https://security.gentoo.org/glsa/201406-26","reference_id":"GLSA-201406-26","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201406-26"},{"reference_url":"https://usn.ubuntu.com/2212-1/","reference_id":"USN-2212-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/2212-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/124803?format=json","purl":"pkg:deb/debian/python-django@1.6.5-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@1.6.5-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/124779?format=json","purl":"pkg:deb/debian/python-django@2:2.2.28-1~deb11u2?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2as8-7qx6-2kba"},{"vulnerability":"VCID-4gpn-bf2d-ybfb"},{"vulnerability":"VCID-55xg-pw9n-zkdy"},{"vulnerability":"VCID-9gq3-whr8-s7b8"},{"vulnerability":"VCID-abpe-htm1-9ubp"},{"vulnerability":"VCID-eqsc-axng-ckca"},{"vulnerability":"VCID-fsz5-dkw2-hyap"},{"vulnerability":"VCID-fxuu-kk52-r7ch"},{"vulnerability":"VCID-ga7z-wj4j-63h1"},{"vulnerability":"VCID-hsjn-xnpp-5yeh"},{"vulnerability":"VCID-kxdd-yzp3-r7cb"},{"vulnerability":"VCID-m4am-h2ea-3ffr"},{"vulnerability":"VCID-phkp-9abp-f3dq"},{"vulnerability":"VCID-rqqc-ta7c-ykgx"},{"vulnerability":"VCID-tktt-vg92-6kae"},{"vulnerability":"VCID-tuqc-c251-h7ds"},{"vulnerability":"VCID-w777-44ns-cybg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@2:2.2.28-1~deb11u2%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/124777?format=json","purl":"pkg:deb/debian/python-django@3:3.2.25-0%2Bdeb12u2?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2as8-7qx6-2kba"},{"vulnerability":"VCID-4gpn-bf2d-ybfb"},{"vulnerability":"VCID-55xg-pw9n-zkdy"},{"vulnerability":"VCID-9gq3-whr8-s7b8"},{"vulnerability":"VCID-abpe-htm1-9ubp"},{"vulnerability":"VCID-eqsc-axng-ckca"},{"vulnerability":"VCID-fsz5-dkw2-hyap"},{"vulnerability":"VCID-fxuu-kk52-r7ch"},{"vulnerability":"VCID-ga7z-wj4j-63h1"},{"vulnerability":"VCID-hsjn-xnpp-5yeh"},{"vulnerability":"VCID-kxdd-yzp3-r7cb"},{"vulnerability":"VCID-m4am-h2ea-3ffr"},{"vulnerability":"VCID-phkp-9abp-f3dq"},{"vulnerability":"VCID-rqqc-ta7c-ykgx"},{"vulnerability":"VCID-tktt-vg92-6kae"},{"vulnerability":"VCID-tuqc-c251-h7ds"},{"vulnerability":"VCID-w777-44ns-cybg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:3.2.25-0%252Bdeb12u2%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/124782?format=json","purl":"pkg:deb/debian/python-django@3:4.2.28-0%2Bdeb13u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2as8-7qx6-2kba"},{"vulnerability":"VCID-4gpn-bf2d-ybfb"},{"vulnerability":"VCID-55xg-pw9n-zkdy"},{"vulnerability":"VCID-abpe-htm1-9ubp"},{"vulnerability":"VCID-eqsc-axng-ckca"},{"vulnerability":"VCID-fsz5-dkw2-hyap"},{"vulnerability":"VCID-fxuu-kk52-r7ch"},{"vulnerability":"VCID-ga7z-wj4j-63h1"},{"vulnerability":"VCID-kxdd-yzp3-r7cb"},{"vulnerability":"VCID-m4am-h2ea-3ffr"},{"vulnerability":"VCID-phkp-9abp-f3dq"},{"vulnerability":"VCID-tktt-vg92-6kae"},{"vulnerability":"VCID-tuqc-c251-h7ds"},{"vulnerability":"VCID-w777-44ns-cybg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:4.2.28-0%252Bdeb13u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/124780?format=json","purl":"pkg:deb/debian/python-django@3:4.2.30-1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2as8-7qx6-2kba"},{"vulnerability":"VCID-4gpn-bf2d-ybfb"},{"vulnerability":"VCID-55xg-pw9n-zkdy"},{"vulnerability":"VCID-abpe-htm1-9ubp"},{"vulnerability":"VCID-eqsc-axng-ckca"},{"vulnerability":"VCID-fsz5-dkw2-hyap"},{"vulnerability":"VCID-fxuu-kk52-r7ch"},{"vulnerability":"VCID-m4am-h2ea-3ffr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:4.2.30-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/124781?format=json","purl":"pkg:deb/debian/python-django@3:5.2.15-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:5.2.15-1%3Fdistro=trixie"}],"aliases":["CVE-2014-1418","GHSA-q7q2-qf2q-rw3w","PYSEC-2014-19"],"risk_score":4.5,"exploitability":"0.5","weighted_severity":"9.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-71t1-69yq-c7h6"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/34878?format=json","vulnerability_id":"VCID-9bqp-b6rw-mye7","summary":"The django.util.http.is_safe_url function in Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly validate URLs, which allows remote attackers to conduct open redirect attacks via a malformed URL, as demonstrated by \"http:\\\\\\djangoproject.com.\"","references":[{"reference_url":"http://lists.opensuse.org/opensuse-updates/2014-09/msg00023.html","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"7.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://lists.opensuse.org/opensuse-updates/2014-09/msg00023.html"},{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3730.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3730.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2014-3730","reference_id":"","reference_type":"","scores":[{"value":"0.00988","scoring_system":"epss","scoring_elements":"0.77234","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00988","scoring_system":"epss","scoring_elements":"0.77202","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2014-3730"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0472","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0472"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0473","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0473"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0474","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0474"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1418","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1418"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3730","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3730"},{"reference_url":"http://secunia.com/advisories/61281","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"7.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://secunia.com/advisories/61281"},{"reference_url":"https://github.com/django/django","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"7.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/django/django"},{"reference_url":"https://github.com/django/django/commit/601107524523bca02376a0ddc1a06c6fdb8f22f3","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"7.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/django/django/commit/601107524523bca02376a0ddc1a06c6fdb8f22f3"},{"reference_url":"https://github.com/django/django/commit/7feb54bbae3f637ab3c4dd4831d4385964f574df","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"7.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/django/django/commit/7feb54bbae3f637ab3c4dd4831d4385964f574df"},{"reference_url":"https://github.com/django/django/commit/ad32c218850ad40972dcef57beb460f8c979dd6d","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"7.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/django/django/commit/ad32c218850ad40972dcef57beb460f8c979dd6d"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2014-20.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"7.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2014-20.yaml"},{"reference_url":"https://web.archive.org/web/20200228171223/http://www.securityfocus.com/bid/67410","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"7.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://web.archive.org/web/20200228171223/http://www.securityfocus.com/bid/67410"},{"reference_url":"https://www.djangoproject.com/weblog/2014/may/14/security-releases-issued","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"7.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.djangoproject.com/weblog/2014/may/14/security-releases-issued"},{"reference_url":"https://www.djangoproject.com/weblog/2014/may/14/security-releases-issued/","reference_id":"","reference_type":"","scores":[],"url":"https://www.djangoproject.com/weblog/2014/may/14/security-releases-issued/"},{"reference_url":"http://ubuntu.com/usn/usn-2212-1","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"7.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://ubuntu.com/usn/usn-2212-1"},{"reference_url":"http://www.debian.org/security/2014/dsa-2934","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"7.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://www.debian.org/security/2014/dsa-2934"},{"reference_url":"http://www.openwall.com/lists/oss-security/2014/05/14/10","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"7.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://www.openwall.com/lists/oss-security/2014/05/14/10"},{"reference_url":"http://www.openwall.com/lists/oss-security/2014/05/15/3","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"7.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://www.openwall.com/lists/oss-security/2014/05/15/3"},{"reference_url":"http://www.securityfocus.com/bid/67410","reference_id":"","reference_type":"","scores":[],"url":"http://www.securityfocus.com/bid/67410"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1097505","reference_id":"1097505","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1097505"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3730","reference_id":"CVE-2014-3730","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"7.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3730"},{"reference_url":"https://github.com/advisories/GHSA-vq3h-3q7v-9prw","reference_id":"GHSA-vq3h-3q7v-9prw","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-vq3h-3q7v-9prw"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/124803?format=json","purl":"pkg:deb/debian/python-django@1.6.5-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@1.6.5-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/124779?format=json","purl":"pkg:deb/debian/python-django@2:2.2.28-1~deb11u2?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2as8-7qx6-2kba"},{"vulnerability":"VCID-4gpn-bf2d-ybfb"},{"vulnerability":"VCID-55xg-pw9n-zkdy"},{"vulnerability":"VCID-9gq3-whr8-s7b8"},{"vulnerability":"VCID-abpe-htm1-9ubp"},{"vulnerability":"VCID-eqsc-axng-ckca"},{"vulnerability":"VCID-fsz5-dkw2-hyap"},{"vulnerability":"VCID-fxuu-kk52-r7ch"},{"vulnerability":"VCID-ga7z-wj4j-63h1"},{"vulnerability":"VCID-hsjn-xnpp-5yeh"},{"vulnerability":"VCID-kxdd-yzp3-r7cb"},{"vulnerability":"VCID-m4am-h2ea-3ffr"},{"vulnerability":"VCID-phkp-9abp-f3dq"},{"vulnerability":"VCID-rqqc-ta7c-ykgx"},{"vulnerability":"VCID-tktt-vg92-6kae"},{"vulnerability":"VCID-tuqc-c251-h7ds"},{"vulnerability":"VCID-w777-44ns-cybg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@2:2.2.28-1~deb11u2%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/124777?format=json","purl":"pkg:deb/debian/python-django@3:3.2.25-0%2Bdeb12u2?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2as8-7qx6-2kba"},{"vulnerability":"VCID-4gpn-bf2d-ybfb"},{"vulnerability":"VCID-55xg-pw9n-zkdy"},{"vulnerability":"VCID-9gq3-whr8-s7b8"},{"vulnerability":"VCID-abpe-htm1-9ubp"},{"vulnerability":"VCID-eqsc-axng-ckca"},{"vulnerability":"VCID-fsz5-dkw2-hyap"},{"vulnerability":"VCID-fxuu-kk52-r7ch"},{"vulnerability":"VCID-ga7z-wj4j-63h1"},{"vulnerability":"VCID-hsjn-xnpp-5yeh"},{"vulnerability":"VCID-kxdd-yzp3-r7cb"},{"vulnerability":"VCID-m4am-h2ea-3ffr"},{"vulnerability":"VCID-phkp-9abp-f3dq"},{"vulnerability":"VCID-rqqc-ta7c-ykgx"},{"vulnerability":"VCID-tktt-vg92-6kae"},{"vulnerability":"VCID-tuqc-c251-h7ds"},{"vulnerability":"VCID-w777-44ns-cybg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:3.2.25-0%252Bdeb12u2%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/124782?format=json","purl":"pkg:deb/debian/python-django@3:4.2.28-0%2Bdeb13u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2as8-7qx6-2kba"},{"vulnerability":"VCID-4gpn-bf2d-ybfb"},{"vulnerability":"VCID-55xg-pw9n-zkdy"},{"vulnerability":"VCID-abpe-htm1-9ubp"},{"vulnerability":"VCID-eqsc-axng-ckca"},{"vulnerability":"VCID-fsz5-dkw2-hyap"},{"vulnerability":"VCID-fxuu-kk52-r7ch"},{"vulnerability":"VCID-ga7z-wj4j-63h1"},{"vulnerability":"VCID-kxdd-yzp3-r7cb"},{"vulnerability":"VCID-m4am-h2ea-3ffr"},{"vulnerability":"VCID-phkp-9abp-f3dq"},{"vulnerability":"VCID-tktt-vg92-6kae"},{"vulnerability":"VCID-tuqc-c251-h7ds"},{"vulnerability":"VCID-w777-44ns-cybg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:4.2.28-0%252Bdeb13u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/124780?format=json","purl":"pkg:deb/debian/python-django@3:4.2.30-1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2as8-7qx6-2kba"},{"vulnerability":"VCID-4gpn-bf2d-ybfb"},{"vulnerability":"VCID-55xg-pw9n-zkdy"},{"vulnerability":"VCID-abpe-htm1-9ubp"},{"vulnerability":"VCID-eqsc-axng-ckca"},{"vulnerability":"VCID-fsz5-dkw2-hyap"},{"vulnerability":"VCID-fxuu-kk52-r7ch"},{"vulnerability":"VCID-m4am-h2ea-3ffr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:4.2.30-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/124781?format=json","purl":"pkg:deb/debian/python-django@3:5.2.15-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:5.2.15-1%3Fdistro=trixie"}],"aliases":["CVE-2014-3730","GHSA-vq3h-3q7v-9prw","PYSEC-2014-20"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-9bqp-b6rw-mye7"}],"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@1.6.5-1%3Fdistro=trixie"}