{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/35178?format=json","vulnerability_id":"VCID-x61x-6b6k-h3bn","summary":"An issue was discovered in Django 2.0 before 2.0.3, 1.11 before 1.11.11, and 1.8 before 1.8.19. If django.utils.text.Truncator's chars() and words() methods were passed the html=True argument, they were extremely slow to evaluate certain inputs due to a catastrophic backtracking vulnerability in a regular expression. The chars() and words() methods are used to implement the truncatechars_html and truncatewords_html template filters, which were thus vulnerable.","aliases":[{"alias":"CVE-2018-7537"},{"alias":"GHSA-2f9x-5v75-3qv4"},{"alias":"PYSEC-2018-6"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/10735?format=json","purl":"pkg:pypi/django@1.8.19","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-9mpt-zxaw-kkeg"},{"vulnerability":"VCID-vdpf-jddk-syda"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.19"},{"url":"http://public2.vulnerablecode.io/api/packages/10736?format=json","purl":"pkg:pypi/django@1.11.11","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-322v-ntsv-7uge"},{"vulnerability":"VCID-3mfy-uj9u-d7de"},{"vulnerability":"VCID-5q58-pzt4-8uey"},{"vulnerability":"VCID-9mpt-zxaw-kkeg"},{"vulnerability":"VCID-c3m7-fu62-2qd9"},{"vulnerability":"VCID-f1br-hvnm-wfdg"},{"vulnerability":"VCID-g44a-m54u-97cr"},{"vulnerability":"VCID-gfar-wbzc-3ubr"},{"vulnerability":"VCID-kbab-v2gz-dfe6"},{"vulnerability":"VCID-m4wa-xv9b-q7ce"},{"vulnerability":"VCID-t952-ghnf-jkby"},{"vulnerability":"VCID-vdpf-jddk-syda"},{"vulnerability":"VCID-yreb-z7nz-jkbs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.11.11"},{"url":"http://public2.vulnerablecode.io/api/packages/10737?format=json","purl":"pkg:pypi/django@2.0.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-322v-ntsv-7uge"},{"vulnerability":"VCID-9mpt-zxaw-kkeg"},{"vulnerability":"VCID-f1br-hvnm-wfdg"},{"vulnerability":"VCID-t952-ghnf-jkby"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@2.0.3"}],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/8957?format=json","purl":"pkg:pypi/django@1.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3kza-a88p-kfg7"},{"vulnerability":"VCID-6wah-r8vr-5qc4"},{"vulnerability":"VCID-8gus-er59-1qak"},{"vulnerability":"VCID-9mpt-zxaw-kkeg"},{"vulnerability":"VCID-c58g-7jpv-t7hc"},{"vulnerability":"VCID-d62f-7csz-fuhm"},{"vulnerability":"VCID-jfya-694v-myar"},{"vulnerability":"VCID-kq8u-td31-uqaa"},{"vulnerability":"VCID-ksh8-pazn-dbca"},{"vulnerability":"VCID-mccp-khb9-qkb7"},{"vulnerability":"VCID-n2eg-vn4k-yycf"},{"vulnerability":"VCID-qy2a-mvpz-q7eh"},{"vulnerability":"VCID-rruq-9scz-vbg8"},{"vulnerability":"VCID-rxxr-sseq-k7a9"},{"vulnerability":"VCID-upbz-vg19-rugv"},{"vulnerability":"VCID-vdpf-jddk-syda"},{"vulnerability":"VCID-weqb-fxu4-17e7"},{"vulnerability":"VCID-x61x-6b6k-h3bn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8"},{"url":"http://public2.vulnerablecode.io/api/packages/8958?format=json","purl":"pkg:pypi/django@1.8.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3kza-a88p-kfg7"},{"vulnerability":"VCID-6wah-r8vr-5qc4"},{"vulnerability":"VCID-8gus-er59-1qak"},{"vulnerability":"VCID-9mpt-zxaw-kkeg"},{"vulnerability":"VCID-c58g-7jpv-t7hc"},{"vulnerability":"VCID-d62f-7csz-fuhm"},{"vulnerability":"VCID-jfya-694v-myar"},{"vulnerability":"VCID-kq8u-td31-uqaa"},{"vulnerability":"VCID-ksh8-pazn-dbca"},{"vulnerability":"VCID-mccp-khb9-qkb7"},{"vulnerability":"VCID-n2eg-vn4k-yycf"},{"vulnerability":"VCID-qy2a-mvpz-q7eh"},{"vulnerability":"VCID-rruq-9scz-vbg8"},{"vulnerability":"VCID-rxxr-sseq-k7a9"},{"vulnerability":"VCID-upbz-vg19-rugv"},{"vulnerability":"VCID-vdpf-jddk-syda"},{"vulnerability":"VCID-weqb-fxu4-17e7"},{"vulnerability":"VCID-x61x-6b6k-h3bn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.1"},{"url":"http://public2.vulnerablecode.io/api/packages/8959?format=json","purl":"pkg:pypi/django@1.8.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3kza-a88p-kfg7"},{"vulnerability":"VCID-6wah-r8vr-5qc4"},{"vulnerability":"VCID-8gus-er59-1qak"},{"vulnerability":"VCID-9mpt-zxaw-kkeg"},{"vulnerability":"VCID-c58g-7jpv-t7hc"},{"vulnerability":"VCID-d62f-7csz-fuhm"},{"vulnerability":"VCID-jfya-694v-myar"},{"vulnerability":"VCID-kq8u-td31-uqaa"},{"vulnerability":"VCID-ksh8-pazn-dbca"},{"vulnerability":"VCID-mccp-khb9-qkb7"},{"vulnerability":"VCID-qy2a-mvpz-q7eh"},{"vulnerability":"VCID-rruq-9scz-vbg8"},{"vulnerability":"VCID-rxxr-sseq-k7a9"},{"vulnerability":"VCID-upbz-vg19-rugv"},{"vulnerability":"VCID-vdpf-jddk-syda"},{"vulnerability":"VCID-weqb-fxu4-17e7"},{"vulnerability":"VCID-x61x-6b6k-h3bn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.2"},{"url":"http://public2.vulnerablecode.io/api/packages/8999?format=json","purl":"pkg:pypi/django@1.8.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3kza-a88p-kfg7"},{"vulnerability":"VCID-6wah-r8vr-5qc4"},{"vulnerability":"VCID-8gus-er59-1qak"},{"vulnerability":"VCID-9mpt-zxaw-kkeg"},{"vulnerability":"VCID-c58g-7jpv-t7hc"},{"vulnerability":"VCID-kq8u-td31-uqaa"},{"vulnerability":"VCID-ksh8-pazn-dbca"},{"vulnerability":"VCID-qy2a-mvpz-q7eh"},{"vulnerability":"VCID-rruq-9scz-vbg8"},{"vulnerability":"VCID-rxxr-sseq-k7a9"},{"vulnerability":"VCID-upbz-vg19-rugv"},{"vulnerability":"VCID-vdpf-jddk-syda"},{"vulnerability":"VCID-weqb-fxu4-17e7"},{"vulnerability":"VCID-x61x-6b6k-h3bn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.3"},{"url":"http://public2.vulnerablecode.io/api/packages/9043?format=json","purl":"pkg:pypi/django@1.8.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3kza-a88p-kfg7"},{"vulnerability":"VCID-6wah-r8vr-5qc4"},{"vulnerability":"VCID-8gus-er59-1qak"},{"vulnerability":"VCID-9mpt-zxaw-kkeg"},{"vulnerability":"VCID-c58g-7jpv-t7hc"},{"vulnerability":"VCID-ksh8-pazn-dbca"},{"vulnerability":"VCID-qy2a-mvpz-q7eh"},{"vulnerability":"VCID-rruq-9scz-vbg8"},{"vulnerability":"VCID-rxxr-sseq-k7a9"},{"vulnerability":"VCID-upbz-vg19-rugv"},{"vulnerability":"VCID-vdpf-jddk-syda"},{"vulnerability":"VCID-weqb-fxu4-17e7"},{"vulnerability":"VCID-x61x-6b6k-h3bn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.4"},{"url":"http://public2.vulnerablecode.io/api/packages/9067?format=json","purl":"pkg:pypi/django@1.8.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3kza-a88p-kfg7"},{"vulnerability":"VCID-6wah-r8vr-5qc4"},{"vulnerability":"VCID-8gus-er59-1qak"},{"vulnerability":"VCID-9mpt-zxaw-kkeg"},{"vulnerability":"VCID-c58g-7jpv-t7hc"},{"vulnerability":"VCID-ksh8-pazn-dbca"},{"vulnerability":"VCID-qy2a-mvpz-q7eh"},{"vulnerability":"VCID-rruq-9scz-vbg8"},{"vulnerability":"VCID-rxxr-sseq-k7a9"},{"vulnerability":"VCID-upbz-vg19-rugv"},{"vulnerability":"VCID-vdpf-jddk-syda"},{"vulnerability":"VCID-weqb-fxu4-17e7"},{"vulnerability":"VCID-x61x-6b6k-h3bn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.5"},{"url":"http://public2.vulnerablecode.io/api/packages/9068?format=json","purl":"pkg:pypi/django@1.8.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3kza-a88p-kfg7"},{"vulnerability":"VCID-6wah-r8vr-5qc4"},{"vulnerability":"VCID-8gus-er59-1qak"},{"vulnerability":"VCID-9mpt-zxaw-kkeg"},{"vulnerability":"VCID-c58g-7jpv-t7hc"},{"vulnerability":"VCID-ksh8-pazn-dbca"},{"vulnerability":"VCID-qy2a-mvpz-q7eh"},{"vulnerability":"VCID-rruq-9scz-vbg8"},{"vulnerability":"VCID-rxxr-sseq-k7a9"},{"vulnerability":"VCID-upbz-vg19-rugv"},{"vulnerability":"VCID-vdpf-jddk-syda"},{"vulnerability":"VCID-weqb-fxu4-17e7"},{"vulnerability":"VCID-x61x-6b6k-h3bn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.6"},{"url":"http://public2.vulnerablecode.io/api/packages/9073?format=json","purl":"pkg:pypi/django@1.8.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3kza-a88p-kfg7"},{"vulnerability":"VCID-6wah-r8vr-5qc4"},{"vulnerability":"VCID-8gus-er59-1qak"},{"vulnerability":"VCID-9mpt-zxaw-kkeg"},{"vulnerability":"VCID-c58g-7jpv-t7hc"},{"vulnerability":"VCID-ksh8-pazn-dbca"},{"vulnerability":"VCID-qy2a-mvpz-q7eh"},{"vulnerability":"VCID-rruq-9scz-vbg8"},{"vulnerability":"VCID-upbz-vg19-rugv"},{"vulnerability":"VCID-vdpf-jddk-syda"},{"vulnerability":"VCID-weqb-fxu4-17e7"},{"vulnerability":"VCID-x61x-6b6k-h3bn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.7"},{"url":"http://public2.vulnerablecode.io/api/packages/9137?format=json","purl":"pkg:pypi/django@1.8.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3kza-a88p-kfg7"},{"vulnerability":"VCID-6wah-r8vr-5qc4"},{"vulnerability":"VCID-8gus-er59-1qak"},{"vulnerability":"VCID-9mpt-zxaw-kkeg"},{"vulnerability":"VCID-c58g-7jpv-t7hc"},{"vulnerability":"VCID-ksh8-pazn-dbca"},{"vulnerability":"VCID-qy2a-mvpz-q7eh"},{"vulnerability":"VCID-rruq-9scz-vbg8"},{"vulnerability":"VCID-upbz-vg19-rugv"},{"vulnerability":"VCID-vdpf-jddk-syda"},{"vulnerability":"VCID-weqb-fxu4-17e7"},{"vulnerability":"VCID-x61x-6b6k-h3bn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.8"},{"url":"http://public2.vulnerablecode.io/api/packages/9138?format=json","purl":"pkg:pypi/django@1.8.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3kza-a88p-kfg7"},{"vulnerability":"VCID-6wah-r8vr-5qc4"},{"vulnerability":"VCID-8gus-er59-1qak"},{"vulnerability":"VCID-9mpt-zxaw-kkeg"},{"vulnerability":"VCID-c58g-7jpv-t7hc"},{"vulnerability":"VCID-ksh8-pazn-dbca"},{"vulnerability":"VCID-qy2a-mvpz-q7eh"},{"vulnerability":"VCID-rruq-9scz-vbg8"},{"vulnerability":"VCID-upbz-vg19-rugv"},{"vulnerability":"VCID-vdpf-jddk-syda"},{"vulnerability":"VCID-weqb-fxu4-17e7"},{"vulnerability":"VCID-x61x-6b6k-h3bn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.9"},{"url":"http://public2.vulnerablecode.io/api/packages/9139?format=json","purl":"pkg:pypi/django@1.8.10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3kza-a88p-kfg7"},{"vulnerability":"VCID-8gus-er59-1qak"},{"vulnerability":"VCID-9mpt-zxaw-kkeg"},{"vulnerability":"VCID-c58g-7jpv-t7hc"},{"vulnerability":"VCID-qy2a-mvpz-q7eh"},{"vulnerability":"VCID-rruq-9scz-vbg8"},{"vulnerability":"VCID-upbz-vg19-rugv"},{"vulnerability":"VCID-vdpf-jddk-syda"},{"vulnerability":"VCID-weqb-fxu4-17e7"},{"vulnerability":"VCID-x61x-6b6k-h3bn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.10"},{"url":"http://public2.vulnerablecode.io/api/packages/9246?format=json","purl":"pkg:pypi/django@1.8.11","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3kza-a88p-kfg7"},{"vulnerability":"VCID-8gus-er59-1qak"},{"vulnerability":"VCID-9mpt-zxaw-kkeg"},{"vulnerability":"VCID-c58g-7jpv-t7hc"},{"vulnerability":"VCID-qy2a-mvpz-q7eh"},{"vulnerability":"VCID-rruq-9scz-vbg8"},{"vulnerability":"VCID-upbz-vg19-rugv"},{"vulnerability":"VCID-vdpf-jddk-syda"},{"vulnerability":"VCID-weqb-fxu4-17e7"},{"vulnerability":"VCID-x61x-6b6k-h3bn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.11"},{"url":"http://public2.vulnerablecode.io/api/packages/9247?format=json","purl":"pkg:pypi/django@1.8.12","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3kza-a88p-kfg7"},{"vulnerability":"VCID-8gus-er59-1qak"},{"vulnerability":"VCID-9mpt-zxaw-kkeg"},{"vulnerability":"VCID-c58g-7jpv-t7hc"},{"vulnerability":"VCID-qy2a-mvpz-q7eh"},{"vulnerability":"VCID-rruq-9scz-vbg8"},{"vulnerability":"VCID-upbz-vg19-rugv"},{"vulnerability":"VCID-vdpf-jddk-syda"},{"vulnerability":"VCID-weqb-fxu4-17e7"},{"vulnerability":"VCID-x61x-6b6k-h3bn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.12"},{"url":"http://public2.vulnerablecode.io/api/packages/9248?format=json","purl":"pkg:pypi/django@1.8.13","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3kza-a88p-kfg7"},{"vulnerability":"VCID-8gus-er59-1qak"},{"vulnerability":"VCID-9mpt-zxaw-kkeg"},{"vulnerability":"VCID-c58g-7jpv-t7hc"},{"vulnerability":"VCID-qy2a-mvpz-q7eh"},{"vulnerability":"VCID-rruq-9scz-vbg8"},{"vulnerability":"VCID-upbz-vg19-rugv"},{"vulnerability":"VCID-vdpf-jddk-syda"},{"vulnerability":"VCID-weqb-fxu4-17e7"},{"vulnerability":"VCID-x61x-6b6k-h3bn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.13"},{"url":"http://public2.vulnerablecode.io/api/packages/9255?format=json","purl":"pkg:pypi/django@1.8.14","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8gus-er59-1qak"},{"vulnerability":"VCID-9mpt-zxaw-kkeg"},{"vulnerability":"VCID-c58g-7jpv-t7hc"},{"vulnerability":"VCID-qy2a-mvpz-q7eh"},{"vulnerability":"VCID-rruq-9scz-vbg8"},{"vulnerability":"VCID-upbz-vg19-rugv"},{"vulnerability":"VCID-vdpf-jddk-syda"},{"vulnerability":"VCID-weqb-fxu4-17e7"},{"vulnerability":"VCID-x61x-6b6k-h3bn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.14"},{"url":"http://public2.vulnerablecode.io/api/packages/9440?format=json","purl":"pkg:pypi/django@1.8.15","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8gus-er59-1qak"},{"vulnerability":"VCID-9mpt-zxaw-kkeg"},{"vulnerability":"VCID-c58g-7jpv-t7hc"},{"vulnerability":"VCID-qy2a-mvpz-q7eh"},{"vulnerability":"VCID-rruq-9scz-vbg8"},{"vulnerability":"VCID-upbz-vg19-rugv"},{"vulnerability":"VCID-vdpf-jddk-syda"},{"vulnerability":"VCID-x61x-6b6k-h3bn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.15"},{"url":"http://public2.vulnerablecode.io/api/packages/9457?format=json","purl":"pkg:pypi/django@1.8.16","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-9mpt-zxaw-kkeg"},{"vulnerability":"VCID-c58g-7jpv-t7hc"},{"vulnerability":"VCID-rruq-9scz-vbg8"},{"vulnerability":"VCID-upbz-vg19-rugv"},{"vulnerability":"VCID-vdpf-jddk-syda"},{"vulnerability":"VCID-x61x-6b6k-h3bn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.16"},{"url":"http://public2.vulnerablecode.io/api/packages/9835?format=json","purl":"pkg:pypi/django@1.8.17","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-9mpt-zxaw-kkeg"},{"vulnerability":"VCID-c58g-7jpv-t7hc"},{"vulnerability":"VCID-rruq-9scz-vbg8"},{"vulnerability":"VCID-upbz-vg19-rugv"},{"vulnerability":"VCID-vdpf-jddk-syda"},{"vulnerability":"VCID-x61x-6b6k-h3bn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.17"},{"url":"http://public2.vulnerablecode.io/api/packages/9842?format=json","purl":"pkg:pypi/django@1.8.18","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-9mpt-zxaw-kkeg"},{"vulnerability":"VCID-c58g-7jpv-t7hc"},{"vulnerability":"VCID-vdpf-jddk-syda"},{"vulnerability":"VCID-x61x-6b6k-h3bn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.18"},{"url":"http://public2.vulnerablecode.io/api/packages/10255?format=json","purl":"pkg:pypi/django@1.11","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-322v-ntsv-7uge"},{"vulnerability":"VCID-3mfy-uj9u-d7de"},{"vulnerability":"VCID-5q58-pzt4-8uey"},{"vulnerability":"VCID-9mpt-zxaw-kkeg"},{"vulnerability":"VCID-c3m7-fu62-2qd9"},{"vulnerability":"VCID-c58g-7jpv-t7hc"},{"vulnerability":"VCID-f1br-hvnm-wfdg"},{"vulnerability":"VCID-g44a-m54u-97cr"},{"vulnerability":"VCID-gfar-wbzc-3ubr"},{"vulnerability":"VCID-hpj4-a9fa-4bca"},{"vulnerability":"VCID-kbab-v2gz-dfe6"},{"vulnerability":"VCID-m4wa-xv9b-q7ce"},{"vulnerability":"VCID-t952-ghnf-jkby"},{"vulnerability":"VCID-vdpf-jddk-syda"},{"vulnerability":"VCID-x61x-6b6k-h3bn"},{"vulnerability":"VCID-yreb-z7nz-jkbs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.11"},{"url":"http://public2.vulnerablecode.io/api/packages/10256?format=json","purl":"pkg:pypi/django@1.11.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-322v-ntsv-7uge"},{"vulnerability":"VCID-3mfy-uj9u-d7de"},{"vulnerability":"VCID-5q58-pzt4-8uey"},{"vulnerability":"VCID-9mpt-zxaw-kkeg"},{"vulnerability":"VCID-c3m7-fu62-2qd9"},{"vulnerability":"VCID-c58g-7jpv-t7hc"},{"vulnerability":"VCID-f1br-hvnm-wfdg"},{"vulnerability":"VCID-g44a-m54u-97cr"},{"vulnerability":"VCID-gfar-wbzc-3ubr"},{"vulnerability":"VCID-hpj4-a9fa-4bca"},{"vulnerability":"VCID-kbab-v2gz-dfe6"},{"vulnerability":"VCID-m4wa-xv9b-q7ce"},{"vulnerability":"VCID-t952-ghnf-jkby"},{"vulnerability":"VCID-vdpf-jddk-syda"},{"vulnerability":"VCID-x61x-6b6k-h3bn"},{"vulnerability":"VCID-yreb-z7nz-jkbs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.11.1"},{"url":"http://public2.vulnerablecode.io/api/packages/10257?format=json","purl":"pkg:pypi/django@1.11.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-322v-ntsv-7uge"},{"vulnerability":"VCID-3mfy-uj9u-d7de"},{"vulnerability":"VCID-5q58-pzt4-8uey"},{"vulnerability":"VCID-9mpt-zxaw-kkeg"},{"vulnerability":"VCID-c3m7-fu62-2qd9"},{"vulnerability":"VCID-c58g-7jpv-t7hc"},{"vulnerability":"VCID-f1br-hvnm-wfdg"},{"vulnerability":"VCID-g44a-m54u-97cr"},{"vulnerability":"VCID-gfar-wbzc-3ubr"},{"vulnerability":"VCID-hpj4-a9fa-4bca"},{"vulnerability":"VCID-kbab-v2gz-dfe6"},{"vulnerability":"VCID-m4wa-xv9b-q7ce"},{"vulnerability":"VCID-t952-ghnf-jkby"},{"vulnerability":"VCID-vdpf-jddk-syda"},{"vulnerability":"VCID-x61x-6b6k-h3bn"},{"vulnerability":"VCID-yreb-z7nz-jkbs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.11.2"},{"url":"http://public2.vulnerablecode.io/api/packages/10258?format=json","purl":"pkg:pypi/django@1.11.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-322v-ntsv-7uge"},{"vulnerability":"VCID-3mfy-uj9u-d7de"},{"vulnerability":"VCID-5q58-pzt4-8uey"},{"vulnerability":"VCID-9mpt-zxaw-kkeg"},{"vulnerability":"VCID-c3m7-fu62-2qd9"},{"vulnerability":"VCID-c58g-7jpv-t7hc"},{"vulnerability":"VCID-f1br-hvnm-wfdg"},{"vulnerability":"VCID-g44a-m54u-97cr"},{"vulnerability":"VCID-gfar-wbzc-3ubr"},{"vulnerability":"VCID-hpj4-a9fa-4bca"},{"vulnerability":"VCID-kbab-v2gz-dfe6"},{"vulnerability":"VCID-m4wa-xv9b-q7ce"},{"vulnerability":"VCID-t952-ghnf-jkby"},{"vulnerability":"VCID-vdpf-jddk-syda"},{"vulnerability":"VCID-x61x-6b6k-h3bn"},{"vulnerability":"VCID-yreb-z7nz-jkbs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.11.3"},{"url":"http://public2.vulnerablecode.io/api/packages/10259?format=json","purl":"pkg:pypi/django@1.11.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-322v-ntsv-7uge"},{"vulnerability":"VCID-3mfy-uj9u-d7de"},{"vulnerability":"VCID-5q58-pzt4-8uey"},{"vulnerability":"VCID-9mpt-zxaw-kkeg"},{"vulnerability":"VCID-c3m7-fu62-2qd9"},{"vulnerability":"VCID-c58g-7jpv-t7hc"},{"vulnerability":"VCID-f1br-hvnm-wfdg"},{"vulnerability":"VCID-g44a-m54u-97cr"},{"vulnerability":"VCID-gfar-wbzc-3ubr"},{"vulnerability":"VCID-hpj4-a9fa-4bca"},{"vulnerability":"VCID-kbab-v2gz-dfe6"},{"vulnerability":"VCID-m4wa-xv9b-q7ce"},{"vulnerability":"VCID-t952-ghnf-jkby"},{"vulnerability":"VCID-vdpf-jddk-syda"},{"vulnerability":"VCID-x61x-6b6k-h3bn"},{"vulnerability":"VCID-yreb-z7nz-jkbs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.11.4"},{"url":"http://public2.vulnerablecode.io/api/packages/10261?format=json","purl":"pkg:pypi/django@1.11.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-322v-ntsv-7uge"},{"vulnerability":"VCID-3mfy-uj9u-d7de"},{"vulnerability":"VCID-5q58-pzt4-8uey"},{"vulnerability":"VCID-9mpt-zxaw-kkeg"},{"vulnerability":"VCID-c3m7-fu62-2qd9"},{"vulnerability":"VCID-c58g-7jpv-t7hc"},{"vulnerability":"VCID-f1br-hvnm-wfdg"},{"vulnerability":"VCID-g44a-m54u-97cr"},{"vulnerability":"VCID-gfar-wbzc-3ubr"},{"vulnerability":"VCID-kbab-v2gz-dfe6"},{"vulnerability":"VCID-m4wa-xv9b-q7ce"},{"vulnerability":"VCID-t952-ghnf-jkby"},{"vulnerability":"VCID-vdpf-jddk-syda"},{"vulnerability":"VCID-x61x-6b6k-h3bn"},{"vulnerability":"VCID-yreb-z7nz-jkbs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.11.5"},{"url":"http://public2.vulnerablecode.io/api/packages/10730?format=json","purl":"pkg:pypi/django@1.11.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-322v-ntsv-7uge"},{"vulnerability":"VCID-3mfy-uj9u-d7de"},{"vulnerability":"VCID-5q58-pzt4-8uey"},{"vulnerability":"VCID-9mpt-zxaw-kkeg"},{"vulnerability":"VCID-c3m7-fu62-2qd9"},{"vulnerability":"VCID-c58g-7jpv-t7hc"},{"vulnerability":"VCID-f1br-hvnm-wfdg"},{"vulnerability":"VCID-g44a-m54u-97cr"},{"vulnerability":"VCID-gfar-wbzc-3ubr"},{"vulnerability":"VCID-kbab-v2gz-dfe6"},{"vulnerability":"VCID-m4wa-xv9b-q7ce"},{"vulnerability":"VCID-t952-ghnf-jkby"},{"vulnerability":"VCID-vdpf-jddk-syda"},{"vulnerability":"VCID-x61x-6b6k-h3bn"},{"vulnerability":"VCID-yreb-z7nz-jkbs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.11.6"},{"url":"http://public2.vulnerablecode.io/api/packages/10731?format=json","purl":"pkg:pypi/django@1.11.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-322v-ntsv-7uge"},{"vulnerability":"VCID-3mfy-uj9u-d7de"},{"vulnerability":"VCID-5q58-pzt4-8uey"},{"vulnerability":"VCID-9mpt-zxaw-kkeg"},{"vulnerability":"VCID-c3m7-fu62-2qd9"},{"vulnerability":"VCID-c58g-7jpv-t7hc"},{"vulnerability":"VCID-f1br-hvnm-wfdg"},{"vulnerability":"VCID-g44a-m54u-97cr"},{"vulnerability":"VCID-gfar-wbzc-3ubr"},{"vulnerability":"VCID-kbab-v2gz-dfe6"},{"vulnerability":"VCID-m4wa-xv9b-q7ce"},{"vulnerability":"VCID-t952-ghnf-jkby"},{"vulnerability":"VCID-vdpf-jddk-syda"},{"vulnerability":"VCID-x61x-6b6k-h3bn"},{"vulnerability":"VCID-yreb-z7nz-jkbs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.11.7"},{"url":"http://public2.vulnerablecode.io/api/packages/10732?format=json","purl":"pkg:pypi/django@1.11.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-322v-ntsv-7uge"},{"vulnerability":"VCID-3mfy-uj9u-d7de"},{"vulnerability":"VCID-5q58-pzt4-8uey"},{"vulnerability":"VCID-9mpt-zxaw-kkeg"},{"vulnerability":"VCID-c3m7-fu62-2qd9"},{"vulnerability":"VCID-c58g-7jpv-t7hc"},{"vulnerability":"VCID-f1br-hvnm-wfdg"},{"vulnerability":"VCID-g44a-m54u-97cr"},{"vulnerability":"VCID-gfar-wbzc-3ubr"},{"vulnerability":"VCID-kbab-v2gz-dfe6"},{"vulnerability":"VCID-m4wa-xv9b-q7ce"},{"vulnerability":"VCID-t952-ghnf-jkby"},{"vulnerability":"VCID-vdpf-jddk-syda"},{"vulnerability":"VCID-wch3-d92x-sudf"},{"vulnerability":"VCID-x61x-6b6k-h3bn"},{"vulnerability":"VCID-yreb-z7nz-jkbs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.11.8"},{"url":"http://public2.vulnerablecode.io/api/packages/10733?format=json","purl":"pkg:pypi/django@1.11.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-322v-ntsv-7uge"},{"vulnerability":"VCID-3mfy-uj9u-d7de"},{"vulnerability":"VCID-5q58-pzt4-8uey"},{"vulnerability":"VCID-9mpt-zxaw-kkeg"},{"vulnerability":"VCID-c3m7-fu62-2qd9"},{"vulnerability":"VCID-c58g-7jpv-t7hc"},{"vulnerability":"VCID-f1br-hvnm-wfdg"},{"vulnerability":"VCID-g44a-m54u-97cr"},{"vulnerability":"VCID-gfar-wbzc-3ubr"},{"vulnerability":"VCID-kbab-v2gz-dfe6"},{"vulnerability":"VCID-m4wa-xv9b-q7ce"},{"vulnerability":"VCID-t952-ghnf-jkby"},{"vulnerability":"VCID-vdpf-jddk-syda"},{"vulnerability":"VCID-x61x-6b6k-h3bn"},{"vulnerability":"VCID-yreb-z7nz-jkbs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.11.9"},{"url":"http://public2.vulnerablecode.io/api/packages/10734?format=json","purl":"pkg:pypi/django@1.11.10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-322v-ntsv-7uge"},{"vulnerability":"VCID-3mfy-uj9u-d7de"},{"vulnerability":"VCID-5q58-pzt4-8uey"},{"vulnerability":"VCID-9mpt-zxaw-kkeg"},{"vulnerability":"VCID-c3m7-fu62-2qd9"},{"vulnerability":"VCID-c58g-7jpv-t7hc"},{"vulnerability":"VCID-f1br-hvnm-wfdg"},{"vulnerability":"VCID-g44a-m54u-97cr"},{"vulnerability":"VCID-gfar-wbzc-3ubr"},{"vulnerability":"VCID-kbab-v2gz-dfe6"},{"vulnerability":"VCID-m4wa-xv9b-q7ce"},{"vulnerability":"VCID-t952-ghnf-jkby"},{"vulnerability":"VCID-vdpf-jddk-syda"},{"vulnerability":"VCID-x61x-6b6k-h3bn"},{"vulnerability":"VCID-yreb-z7nz-jkbs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.11.10"},{"url":"http://public2.vulnerablecode.io/api/packages/10651?format=json","purl":"pkg:pypi/django@2.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-322v-ntsv-7uge"},{"vulnerability":"VCID-9mpt-zxaw-kkeg"},{"vulnerability":"VCID-c58g-7jpv-t7hc"},{"vulnerability":"VCID-f1br-hvnm-wfdg"},{"vulnerability":"VCID-t952-ghnf-jkby"},{"vulnerability":"VCID-wch3-d92x-sudf"},{"vulnerability":"VCID-x61x-6b6k-h3bn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@2.0"},{"url":"http://public2.vulnerablecode.io/api/packages/10652?format=json","purl":"pkg:pypi/django@2.0.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-322v-ntsv-7uge"},{"vulnerability":"VCID-9mpt-zxaw-kkeg"},{"vulnerability":"VCID-c58g-7jpv-t7hc"},{"vulnerability":"VCID-f1br-hvnm-wfdg"},{"vulnerability":"VCID-t952-ghnf-jkby"},{"vulnerability":"VCID-wch3-d92x-sudf"},{"vulnerability":"VCID-x61x-6b6k-h3bn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@2.0.1"},{"url":"http://public2.vulnerablecode.io/api/packages/10653?format=json","purl":"pkg:pypi/django@2.0.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-322v-ntsv-7uge"},{"vulnerability":"VCID-9mpt-zxaw-kkeg"},{"vulnerability":"VCID-c58g-7jpv-t7hc"},{"vulnerability":"VCID-f1br-hvnm-wfdg"},{"vulnerability":"VCID-t952-ghnf-jkby"},{"vulnerability":"VCID-x61x-6b6k-h3bn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@2.0.2"}],"references":[{"reference_url":"https://access.redhat.com/errata/RHSA-2018:2927","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2018:2927"},{"reference_url":"https://access.redhat.com/errata/RHSA-2019:0265","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2019:0265"},{"reference_url":"https://github.com/advisories/GHSA-2f9x-5v75-3qv4","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-2f9x-5v75-3qv4"},{"reference_url":"https://github.com/django/django","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/django/django"},{"reference_url":"https://github.com/django/django/commit/94c5da1d17a6b0d378866c66b605102c19f7988c","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/django/django/commit/94c5da1d17a6b0d378866c66b605102c19f7988c"},{"reference_url":"https://github.com/django/django/commit/a91436360b79a6ff995c3e5018bcc666dfaf1539","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/django/django/commit/a91436360b79a6ff995c3e5018bcc666dfaf1539"},{"reference_url":"https://github.com/django/django/commit/d17974a287a6ea2e361daff88fcc004cbd6835fa","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/django/django/commit/d17974a287a6ea2e361daff88fcc004cbd6835fa"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2018-6.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2018-6.yaml"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2018/03/msg00006.html","reference_id":"","reference_type":"","scores":[],"url":"https://lists.debian.org/debian-lts-announce/2018/03/msg00006.html"},{"reference_url":"https://usn.ubuntu.com/3591-1","reference_id":"","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/3591-1"},{"reference_url":"https://usn.ubuntu.com/3591-1/","reference_id":"","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/3591-1/"},{"reference_url":"https://www.debian.org/security/2018/dsa-4161","reference_id":"","reference_type":"","scores":[],"url":"https://www.debian.org/security/2018/dsa-4161"},{"reference_url":"https://www.djangoproject.com/weblog/2018/mar/06/security-releases","reference_id":"","reference_type":"","scores":[],"url":"https://www.djangoproject.com/weblog/2018/mar/06/security-releases"},{"reference_url":"https://www.djangoproject.com/weblog/2018/mar/06/security-releases/","reference_id":"","reference_type":"","scores":[],"url":"https://www.djangoproject.com/weblog/2018/mar/06/security-releases/"},{"reference_url":"http://www.securityfocus.com/bid/103357","reference_id":"","reference_type":"","scores":[],"url":"http://www.securityfocus.com/bid/103357"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2018-7537","reference_id":"CVE-2018-7537","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-7537"}],"weaknesses":[{"cwe_id":185,"name":"Incorrect Regular Expression","description":"The product specifies a regular expression in a way that causes data to be improperly matched or compared."},{"cwe_id":937,"name":"OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013."},{"cwe_id":1035,"name":"OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017."}],"exploits":[],"severity_range_score":null,"exploitability":null,"weighted_severity":null,"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-x61x-6b6k-h3bn"}