{"url":"http://public2.vulnerablecode.io/api/packages/936352?format=json","purl":"pkg:deb/debian/python-django@1.6.3-1?distro=trixie","type":"deb","namespace":"debian","name":"python-django","version":"1.6.3-1","qualifiers":{"distro":"trixie"},"subpath":"","is_vulnerable":false,"next_non_vulnerable_version":"1.6.5-1","latest_non_vulnerable_version":"3:5.2.14-1","affected_by_vulnerabilities":[],"fixing_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/5382?format=json","vulnerability_id":"VCID-2m9f-3cgw-ekdr","summary":"The caching framework in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 reuses a cached CSRF token for all anonymous users, which allows remote attackers to bypass CSRF protections by reading the CSRF cookie for anonymous users.","references":[{"reference_url":"http://lists.opensuse.org/opensuse-updates/2014-09/msg00023.html","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://lists.opensuse.org/opensuse-updates/2014-09/msg00023.html"},{"reference_url":"http://rhn.redhat.com/errata/RHSA-2014-0456.html","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://rhn.redhat.com/errata/RHSA-2014-0456.html"},{"reference_url":"http://rhn.redhat.com/errata/RHSA-2014-0457.html","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://rhn.redhat.com/errata/RHSA-2014-0457.html"},{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0473.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0473.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2014-0473","reference_id":"","reference_type":"","scores":[{"value":"0.00298","scoring_system":"epss","scoring_elements":"0.53165","published_at":"2026-04-12T12:55:00Z"},{"value":"0.00298","scoring_system":"epss","scoring_elements":"0.5318","published_at":"2026-04-11T12:55:00Z"},{"value":"0.00298","scoring_system":"epss","scoring_elements":"0.5313","published_at":"2026-04-09T12:55:00Z"},{"value":"0.00298","scoring_system":"epss","scoring_elements":"0.53136","published_at":"2026-04-08T12:55:00Z"},{"value":"0.00298","scoring_system":"epss","scoring_elements":"0.53093","published_at":"2026-04-02T12:55:00Z"},{"value":"0.00298","scoring_system":"epss","scoring_elements":"0.53122","published_at":"2026-05-07T12:55:00Z"},{"value":"0.00298","scoring_system":"epss","scoring_elements":"0.53071","published_at":"2026-05-05T12:55:00Z"},{"value":"0.00298","scoring_system":"epss","scoring_elements":"0.53155","published_at":"2026-04-26T12:55:00Z"},{"value":"0.00298","scoring_system":"epss","scoring_elements":"0.53145","published_at":"2026-04-24T12:55:00Z"},{"value":"0.00298","scoring_system":"epss","scoring_elements":"0.53178","published_at":"2026-04-21T12:55:00Z"},{"value":"0.00298","scoring_system":"epss","scoring_elements":"0.53196","published_at":"2026-04-18T12:55:00Z"},{"value":"0.00298","scoring_system":"epss","scoring_elements":"0.53188","published_at":"2026-04-16T12:55:00Z"},{"value":"0.00298","scoring_system":"epss","scoring_elements":"0.53149","published_at":"2026-04-13T12:55:00Z"},{"value":"0.00298","scoring_system":"epss","scoring_elements":"0.53085","published_at":"2026-04-07T12:55:00Z"},{"value":"0.00298","scoring_system":"epss","scoring_elements":"0.53117","published_at":"2026-04-29T12:55:00Z"},{"value":"0.00298","scoring_system":"epss","scoring_elements":"0.53066","published_at":"2026-04-01T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2014-0473"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0472","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0472"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0473","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0473"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0474","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0474"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1418","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1418"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3730","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3730"},{"reference_url":"http://secunia.com/advisories/61281","reference_id":"","reference_type":"","scores":[],"url":"http://secunia.com/advisories/61281"},{"reference_url":"https://github.com/django/django","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/django/django"},{"reference_url":"https://github.com/django/django/commit/1170f285ddd6a94a65f911a27788ba49ca08c0b0","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/django/django/commit/1170f285ddd6a94a65f911a27788ba49ca08c0b0"},{"reference_url":"https://github.com/django/django/commit/6872f42757d7ef6a97e0b6ec5db4d2615d8a2bd8","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/django/django/commit/6872f42757d7ef6a97e0b6ec5db4d2615d8a2bd8"},{"reference_url":"https://github.com/django/django/commit/d63e20942f3024f24cb8cd85a49461ba8a9b6736","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/django/django/commit/d63e20942f3024f24cb8cd85a49461ba8a9b6736"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2014-2.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2014-2.yaml"},{"reference_url":"https://www.djangoproject.com/weblog/2014/apr/21/security","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.djangoproject.com/weblog/2014/apr/21/security"},{"reference_url":"https://www.djangoproject.com/weblog/2014/apr/21/security/","reference_id":"","reference_type":"","scores":[],"url":"https://www.djangoproject.com/weblog/2014/apr/21/security/"},{"reference_url":"http://www.debian.org/security/2014/dsa-2934","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://www.debian.org/security/2014/dsa-2934"},{"reference_url":"http://www.ubuntu.com/usn/USN-2169-1","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://www.ubuntu.com/usn/USN-2169-1"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1090592","reference_id":"1090592","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1090592"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0473","reference_id":"CVE-2014-0473","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0473"},{"reference_url":"https://github.com/advisories/GHSA-89hj-xfx5-7q66","reference_id":"GHSA-89hj-xfx5-7q66","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-89hj-xfx5-7q66"},{"reference_url":"https://security.gentoo.org/glsa/201406-26","reference_id":"GLSA-201406-26","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201406-26"},{"reference_url":"https://access.redhat.com/errata/RHSA-2014:0456","reference_id":"RHSA-2014:0456","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2014:0456"},{"reference_url":"https://access.redhat.com/errata/RHSA-2014:0457","reference_id":"RHSA-2014:0457","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2014:0457"},{"reference_url":"https://usn.ubuntu.com/2169-1/","reference_id":"USN-2169-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/2169-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/936352?format=json","purl":"pkg:deb/debian/python-django@1.6.3-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@1.6.3-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/936332?format=json","purl":"pkg:deb/debian/python-django@2:2.2.28-1~deb11u2?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1adz-zw3h-pqek"},{"vulnerability":"VCID-46pv-pzsu-jucd"},{"vulnerability":"VCID-ac4c-321h-tqfk"},{"vulnerability":"VCID-buuq-c9ps-jfdu"},{"vulnerability":"VCID-ff2a-at5f-2qa8"},{"vulnerability":"VCID-gfym-spzk-w7gk"},{"vulnerability":"VCID-jzae-1awh-k7cm"},{"vulnerability":"VCID-mga4-an1w-qqf9"},{"vulnerability":"VCID-rwyy-f7jh-pubf"},{"vulnerability":"VCID-ssut-reka-r3f8"},{"vulnerability":"VCID-xhpa-mffz-syfy"},{"vulnerability":"VCID-z47n-5z72-u3bm"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@2:2.2.28-1~deb11u2%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/936330?format=json","purl":"pkg:deb/debian/python-django@3:3.2.19-1%2Bdeb12u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1adz-zw3h-pqek"},{"vulnerability":"VCID-46pv-pzsu-jucd"},{"vulnerability":"VCID-ac4c-321h-tqfk"},{"vulnerability":"VCID-buuq-c9ps-jfdu"},{"vulnerability":"VCID-ff2a-at5f-2qa8"},{"vulnerability":"VCID-gfym-spzk-w7gk"},{"vulnerability":"VCID-jzae-1awh-k7cm"},{"vulnerability":"VCID-mga4-an1w-qqf9"},{"vulnerability":"VCID-rwyy-f7jh-pubf"},{"vulnerability":"VCID-ssut-reka-r3f8"},{"vulnerability":"VCID-xhpa-mffz-syfy"},{"vulnerability":"VCID-z47n-5z72-u3bm"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:3.2.19-1%252Bdeb12u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/936334?format=json","purl":"pkg:deb/debian/python-django@3:4.2.28-0%2Bdeb13u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1adz-zw3h-pqek"},{"vulnerability":"VCID-46pv-pzsu-jucd"},{"vulnerability":"VCID-ac4c-321h-tqfk"},{"vulnerability":"VCID-buuq-c9ps-jfdu"},{"vulnerability":"VCID-ff2a-at5f-2qa8"},{"vulnerability":"VCID-gfym-spzk-w7gk"},{"vulnerability":"VCID-rwyy-f7jh-pubf"},{"vulnerability":"VCID-ssut-reka-r3f8"},{"vulnerability":"VCID-z47n-5z72-u3bm"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:4.2.28-0%252Bdeb13u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/936333?format=json","purl":"pkg:deb/debian/python-django@3:4.2.29-1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1adz-zw3h-pqek"},{"vulnerability":"VCID-46pv-pzsu-jucd"},{"vulnerability":"VCID-ff2a-at5f-2qa8"},{"vulnerability":"VCID-gfym-spzk-w7gk"},{"vulnerability":"VCID-ssut-reka-r3f8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:4.2.29-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/1041995?format=json","purl":"pkg:deb/debian/python-django@3:4.2.30-1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-buuq-c9ps-jfdu"},{"vulnerability":"VCID-rwyy-f7jh-pubf"},{"vulnerability":"VCID-z47n-5z72-u3bm"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:4.2.30-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/1088727?format=json","purl":"pkg:deb/debian/python-django@3:5.2.13-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:5.2.13-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/1103049?format=json","purl":"pkg:deb/debian/python-django@3:5.2.14-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:5.2.14-1%3Fdistro=trixie"}],"aliases":["CVE-2014-0473","GHSA-89hj-xfx5-7q66","PYSEC-2014-2"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-2m9f-3cgw-ekdr"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/5383?format=json","vulnerability_id":"VCID-qzba-9xmg-3qer","summary":"The django.core.urlresolvers.reverse function in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 allows remote attackers to import and execute arbitrary Python modules by leveraging a view that constructs URLs using user input and a \"dotted Python path.\"","references":[{"reference_url":"http://lists.opensuse.org/opensuse-updates/2014-09/msg00023.html","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://lists.opensuse.org/opensuse-updates/2014-09/msg00023.html"},{"reference_url":"http://rhn.redhat.com/errata/RHSA-2014-0456.html","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://rhn.redhat.com/errata/RHSA-2014-0456.html"},{"reference_url":"http://rhn.redhat.com/errata/RHSA-2014-0457.html","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://rhn.redhat.com/errata/RHSA-2014-0457.html"},{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0472.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0472.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2014-0472","reference_id":"","reference_type":"","scores":[{"value":"0.06894","scoring_system":"epss","scoring_elements":"0.9141","published_at":"2026-04-21T12:55:00Z"},{"value":"0.06894","scoring_system":"epss","scoring_elements":"0.91408","published_at":"2026-04-18T12:55:00Z"},{"value":"0.06894","scoring_system":"epss","scoring_elements":"0.91411","published_at":"2026-04-16T12:55:00Z"},{"value":"0.06894","scoring_system":"epss","scoring_elements":"0.91386","published_at":"2026-04-13T12:55:00Z"},{"value":"0.06894","scoring_system":"epss","scoring_elements":"0.91383","published_at":"2026-04-11T12:55:00Z"},{"value":"0.06894","scoring_system":"epss","scoring_elements":"0.91377","published_at":"2026-04-09T12:55:00Z"},{"value":"0.06894","scoring_system":"epss","scoring_elements":"0.9137","published_at":"2026-04-08T12:55:00Z"},{"value":"0.06894","scoring_system":"epss","scoring_elements":"0.91357","published_at":"2026-04-07T12:55:00Z"},{"value":"0.06894","scoring_system":"epss","scoring_elements":"0.9135","published_at":"2026-04-04T12:55:00Z"},{"value":"0.06894","scoring_system":"epss","scoring_elements":"0.91418","published_at":"2026-04-26T12:55:00Z"},{"value":"0.06894","scoring_system":"epss","scoring_elements":"0.91417","published_at":"2026-04-29T12:55:00Z"},{"value":"0.06894","scoring_system":"epss","scoring_elements":"0.91432","published_at":"2026-05-05T12:55:00Z"},{"value":"0.06894","scoring_system":"epss","scoring_elements":"0.91446","published_at":"2026-05-07T12:55:00Z"},{"value":"0.06894","scoring_system":"epss","scoring_elements":"0.9134","published_at":"2026-04-02T12:55:00Z"},{"value":"0.06894","scoring_system":"epss","scoring_elements":"0.91336","published_at":"2026-04-01T12:55:00Z"},{"value":"0.06894","scoring_system":"epss","scoring_elements":"0.9142","published_at":"2026-04-24T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2014-0472"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0472","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0472"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0473","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0473"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0474","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0474"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1418","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1418"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3730","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3730"},{"reference_url":"http://secunia.com/advisories/61281","reference_id":"","reference_type":"","scores":[],"url":"http://secunia.com/advisories/61281"},{"reference_url":"https://github.com/django/django","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/django/django"},{"reference_url":"https://github.com/django/django/commit/2a5bcb69f42b84464b24b5c835dca6467b6aa7f1","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/django/django/commit/2a5bcb69f42b84464b24b5c835dca6467b6aa7f1"},{"reference_url":"https://github.com/django/django/commit/4352a50871e239ebcdf64eee6f0b88e714015c1b","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/django/django/commit/4352a50871e239ebcdf64eee6f0b88e714015c1b"},{"reference_url":"https://github.com/django/django/commit/c1a8c420fe4b27fb2caf5e46d23b5712fc0ac535","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/django/django/commit/c1a8c420fe4b27fb2caf5e46d23b5712fc0ac535"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2014-1.yaml","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2014-1.yaml"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0472","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0472"},{"reference_url":"https://www.djangoproject.com/weblog/2014/apr/21/security","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.djangoproject.com/weblog/2014/apr/21/security"},{"reference_url":"https://www.djangoproject.com/weblog/2014/apr/21/security/","reference_id":"","reference_type":"","scores":[],"url":"https://www.djangoproject.com/weblog/2014/apr/21/security/"},{"reference_url":"http://www.debian.org/security/2014/dsa-2934","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://www.debian.org/security/2014/dsa-2934"},{"reference_url":"http://www.ubuntu.com/usn/USN-2169-1","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"9.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://www.ubuntu.com/usn/USN-2169-1"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1090588","reference_id":"1090588","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1090588"},{"reference_url":"https://github.com/advisories/GHSA-rvq6-mrpv-m6rm","reference_id":"GHSA-rvq6-mrpv-m6rm","reference_type":"","scores":[{"value":"CRITICAL","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-rvq6-mrpv-m6rm"},{"reference_url":"https://security.gentoo.org/glsa/201406-26","reference_id":"GLSA-201406-26","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201406-26"},{"reference_url":"https://access.redhat.com/errata/RHSA-2014:0456","reference_id":"RHSA-2014:0456","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2014:0456"},{"reference_url":"https://access.redhat.com/errata/RHSA-2014:0457","reference_id":"RHSA-2014:0457","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2014:0457"},{"reference_url":"https://usn.ubuntu.com/2169-1/","reference_id":"USN-2169-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/2169-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/936352?format=json","purl":"pkg:deb/debian/python-django@1.6.3-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@1.6.3-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/936332?format=json","purl":"pkg:deb/debian/python-django@2:2.2.28-1~deb11u2?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1adz-zw3h-pqek"},{"vulnerability":"VCID-46pv-pzsu-jucd"},{"vulnerability":"VCID-ac4c-321h-tqfk"},{"vulnerability":"VCID-buuq-c9ps-jfdu"},{"vulnerability":"VCID-ff2a-at5f-2qa8"},{"vulnerability":"VCID-gfym-spzk-w7gk"},{"vulnerability":"VCID-jzae-1awh-k7cm"},{"vulnerability":"VCID-mga4-an1w-qqf9"},{"vulnerability":"VCID-rwyy-f7jh-pubf"},{"vulnerability":"VCID-ssut-reka-r3f8"},{"vulnerability":"VCID-xhpa-mffz-syfy"},{"vulnerability":"VCID-z47n-5z72-u3bm"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@2:2.2.28-1~deb11u2%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/936330?format=json","purl":"pkg:deb/debian/python-django@3:3.2.19-1%2Bdeb12u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1adz-zw3h-pqek"},{"vulnerability":"VCID-46pv-pzsu-jucd"},{"vulnerability":"VCID-ac4c-321h-tqfk"},{"vulnerability":"VCID-buuq-c9ps-jfdu"},{"vulnerability":"VCID-ff2a-at5f-2qa8"},{"vulnerability":"VCID-gfym-spzk-w7gk"},{"vulnerability":"VCID-jzae-1awh-k7cm"},{"vulnerability":"VCID-mga4-an1w-qqf9"},{"vulnerability":"VCID-rwyy-f7jh-pubf"},{"vulnerability":"VCID-ssut-reka-r3f8"},{"vulnerability":"VCID-xhpa-mffz-syfy"},{"vulnerability":"VCID-z47n-5z72-u3bm"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:3.2.19-1%252Bdeb12u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/936334?format=json","purl":"pkg:deb/debian/python-django@3:4.2.28-0%2Bdeb13u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1adz-zw3h-pqek"},{"vulnerability":"VCID-46pv-pzsu-jucd"},{"vulnerability":"VCID-ac4c-321h-tqfk"},{"vulnerability":"VCID-buuq-c9ps-jfdu"},{"vulnerability":"VCID-ff2a-at5f-2qa8"},{"vulnerability":"VCID-gfym-spzk-w7gk"},{"vulnerability":"VCID-rwyy-f7jh-pubf"},{"vulnerability":"VCID-ssut-reka-r3f8"},{"vulnerability":"VCID-z47n-5z72-u3bm"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:4.2.28-0%252Bdeb13u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/936333?format=json","purl":"pkg:deb/debian/python-django@3:4.2.29-1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1adz-zw3h-pqek"},{"vulnerability":"VCID-46pv-pzsu-jucd"},{"vulnerability":"VCID-ff2a-at5f-2qa8"},{"vulnerability":"VCID-gfym-spzk-w7gk"},{"vulnerability":"VCID-ssut-reka-r3f8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:4.2.29-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/1041995?format=json","purl":"pkg:deb/debian/python-django@3:4.2.30-1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-buuq-c9ps-jfdu"},{"vulnerability":"VCID-rwyy-f7jh-pubf"},{"vulnerability":"VCID-z47n-5z72-u3bm"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:4.2.30-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/1088727?format=json","purl":"pkg:deb/debian/python-django@3:5.2.13-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:5.2.13-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/1103049?format=json","purl":"pkg:deb/debian/python-django@3:5.2.14-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:5.2.14-1%3Fdistro=trixie"}],"aliases":["CVE-2014-0472","GHSA-rvq6-mrpv-m6rm","PYSEC-2014-1"],"risk_score":4.5,"exploitability":"0.5","weighted_severity":"9.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-qzba-9xmg-3qer"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/5381?format=json","vulnerability_id":"VCID-yemh-qd63-wuca","summary":"The (1) FilePathField, (2) GenericIPAddressField, and (3) IPAddressField model field classes in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 do not properly perform type conversion, which allows remote attackers to have unspecified impact and vectors, related to \"MySQL typecasting.\"","references":[{"reference_url":"http://lists.opensuse.org/opensuse-updates/2014-09/msg00023.html","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://lists.opensuse.org/opensuse-updates/2014-09/msg00023.html"},{"reference_url":"http://rhn.redhat.com/errata/RHSA-2014-0456.html","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://rhn.redhat.com/errata/RHSA-2014-0456.html"},{"reference_url":"http://rhn.redhat.com/errata/RHSA-2014-0457.html","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://rhn.redhat.com/errata/RHSA-2014-0457.html"},{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0474.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0474.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2014-0474","reference_id":"","reference_type":"","scores":[{"value":"0.03963","scoring_system":"epss","scoring_elements":"0.88428","published_at":"2026-05-07T12:55:00Z"},{"value":"0.03963","scoring_system":"epss","scoring_elements":"0.88314","published_at":"2026-04-01T12:55:00Z"},{"value":"0.03963","scoring_system":"epss","scoring_elements":"0.88322","published_at":"2026-04-02T12:55:00Z"},{"value":"0.03963","scoring_system":"epss","scoring_elements":"0.88337","published_at":"2026-04-04T12:55:00Z"},{"value":"0.03963","scoring_system":"epss","scoring_elements":"0.88342","published_at":"2026-04-07T12:55:00Z"},{"value":"0.03963","scoring_system":"epss","scoring_elements":"0.88361","published_at":"2026-04-08T12:55:00Z"},{"value":"0.03963","scoring_system":"epss","scoring_elements":"0.88367","published_at":"2026-04-09T12:55:00Z"},{"value":"0.03963","scoring_system":"epss","scoring_elements":"0.88378","published_at":"2026-04-11T12:55:00Z"},{"value":"0.03963","scoring_system":"epss","scoring_elements":"0.8837","published_at":"2026-04-13T12:55:00Z"},{"value":"0.03963","scoring_system":"epss","scoring_elements":"0.88384","published_at":"2026-04-16T12:55:00Z"},{"value":"0.03963","scoring_system":"epss","scoring_elements":"0.88381","published_at":"2026-04-21T12:55:00Z"},{"value":"0.03963","scoring_system":"epss","scoring_elements":"0.88397","published_at":"2026-04-24T12:55:00Z"},{"value":"0.03963","scoring_system":"epss","scoring_elements":"0.88401","published_at":"2026-04-26T12:55:00Z"},{"value":"0.03963","scoring_system":"epss","scoring_elements":"0.88402","published_at":"2026-04-29T12:55:00Z"},{"value":"0.03963","scoring_system":"epss","scoring_elements":"0.88413","published_at":"2026-05-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2014-0474"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0472","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0472"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0473","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0473"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0474","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0474"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1418","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1418"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3730","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3730"},{"reference_url":"http://secunia.com/advisories/61281","reference_id":"","reference_type":"","scores":[],"url":"http://secunia.com/advisories/61281"},{"reference_url":"https://github.com/django/django","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/django/django"},{"reference_url":"https://github.com/django/django/commit/5f0829a27e85d89ad8c433f5c6a7a7d17c9e9292","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/django/django/commit/5f0829a27e85d89ad8c433f5c6a7a7d17c9e9292"},{"reference_url":"https://github.com/django/django/commit/985434fb1d6bf2335bf96c6ebf91c3674f1f399f","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/django/django/commit/985434fb1d6bf2335bf96c6ebf91c3674f1f399f"},{"reference_url":"https://github.com/django/django/commit/aa80f498de6d687e613860933ac58433ab71ea4b","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/django/django/commit/aa80f498de6d687e613860933ac58433ab71ea4b"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2014-3.yaml","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2014-3.yaml"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0474","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0474"},{"reference_url":"https://www.djangoproject.com/weblog/2014/apr/21/security","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.djangoproject.com/weblog/2014/apr/21/security"},{"reference_url":"https://www.djangoproject.com/weblog/2014/apr/21/security/","reference_id":"","reference_type":"","scores":[],"url":"https://www.djangoproject.com/weblog/2014/apr/21/security/"},{"reference_url":"http://www.debian.org/security/2014/dsa-2934","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://www.debian.org/security/2014/dsa-2934"},{"reference_url":"http://www.ubuntu.com/usn/USN-2169-1","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"8.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://www.ubuntu.com/usn/USN-2169-1"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1090593","reference_id":"1090593","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1090593"},{"reference_url":"https://github.com/advisories/GHSA-wqjj-hx84-v449","reference_id":"GHSA-wqjj-hx84-v449","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-wqjj-hx84-v449"},{"reference_url":"https://security.gentoo.org/glsa/201406-26","reference_id":"GLSA-201406-26","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201406-26"},{"reference_url":"https://access.redhat.com/errata/RHSA-2014:0456","reference_id":"RHSA-2014:0456","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2014:0456"},{"reference_url":"https://access.redhat.com/errata/RHSA-2014:0457","reference_id":"RHSA-2014:0457","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2014:0457"},{"reference_url":"https://usn.ubuntu.com/2169-1/","reference_id":"USN-2169-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/2169-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/936352?format=json","purl":"pkg:deb/debian/python-django@1.6.3-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@1.6.3-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/936332?format=json","purl":"pkg:deb/debian/python-django@2:2.2.28-1~deb11u2?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1adz-zw3h-pqek"},{"vulnerability":"VCID-46pv-pzsu-jucd"},{"vulnerability":"VCID-ac4c-321h-tqfk"},{"vulnerability":"VCID-buuq-c9ps-jfdu"},{"vulnerability":"VCID-ff2a-at5f-2qa8"},{"vulnerability":"VCID-gfym-spzk-w7gk"},{"vulnerability":"VCID-jzae-1awh-k7cm"},{"vulnerability":"VCID-mga4-an1w-qqf9"},{"vulnerability":"VCID-rwyy-f7jh-pubf"},{"vulnerability":"VCID-ssut-reka-r3f8"},{"vulnerability":"VCID-xhpa-mffz-syfy"},{"vulnerability":"VCID-z47n-5z72-u3bm"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@2:2.2.28-1~deb11u2%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/936330?format=json","purl":"pkg:deb/debian/python-django@3:3.2.19-1%2Bdeb12u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1adz-zw3h-pqek"},{"vulnerability":"VCID-46pv-pzsu-jucd"},{"vulnerability":"VCID-ac4c-321h-tqfk"},{"vulnerability":"VCID-buuq-c9ps-jfdu"},{"vulnerability":"VCID-ff2a-at5f-2qa8"},{"vulnerability":"VCID-gfym-spzk-w7gk"},{"vulnerability":"VCID-jzae-1awh-k7cm"},{"vulnerability":"VCID-mga4-an1w-qqf9"},{"vulnerability":"VCID-rwyy-f7jh-pubf"},{"vulnerability":"VCID-ssut-reka-r3f8"},{"vulnerability":"VCID-xhpa-mffz-syfy"},{"vulnerability":"VCID-z47n-5z72-u3bm"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:3.2.19-1%252Bdeb12u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/936334?format=json","purl":"pkg:deb/debian/python-django@3:4.2.28-0%2Bdeb13u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1adz-zw3h-pqek"},{"vulnerability":"VCID-46pv-pzsu-jucd"},{"vulnerability":"VCID-ac4c-321h-tqfk"},{"vulnerability":"VCID-buuq-c9ps-jfdu"},{"vulnerability":"VCID-ff2a-at5f-2qa8"},{"vulnerability":"VCID-gfym-spzk-w7gk"},{"vulnerability":"VCID-rwyy-f7jh-pubf"},{"vulnerability":"VCID-ssut-reka-r3f8"},{"vulnerability":"VCID-z47n-5z72-u3bm"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:4.2.28-0%252Bdeb13u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/936333?format=json","purl":"pkg:deb/debian/python-django@3:4.2.29-1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1adz-zw3h-pqek"},{"vulnerability":"VCID-46pv-pzsu-jucd"},{"vulnerability":"VCID-ff2a-at5f-2qa8"},{"vulnerability":"VCID-gfym-spzk-w7gk"},{"vulnerability":"VCID-ssut-reka-r3f8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:4.2.29-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/1041995?format=json","purl":"pkg:deb/debian/python-django@3:4.2.30-1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-buuq-c9ps-jfdu"},{"vulnerability":"VCID-rwyy-f7jh-pubf"},{"vulnerability":"VCID-z47n-5z72-u3bm"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:4.2.30-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/1088727?format=json","purl":"pkg:deb/debian/python-django@3:5.2.13-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:5.2.13-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/1103049?format=json","purl":"pkg:deb/debian/python-django@3:5.2.14-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:5.2.14-1%3Fdistro=trixie"}],"aliases":["CVE-2014-0474","GHSA-wqjj-hx84-v449","PYSEC-2014-3"],"risk_score":4.4,"exploitability":"0.5","weighted_severity":"8.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-yemh-qd63-wuca"}],"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@1.6.3-1%3Fdistro=trixie"}