Search for packages
| purl | pkg:alpm/archlinux/python-django@4.0.7-1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-1ay6-j864-aaaq | An issue was discovered in the HTTP FileResponse class in Django 3.2 before 3.2.15 and 4.0 before 4.0.7. An application is vulnerable to a reflected file download (RFD) attack that sets the Content-Disposition header of a FileResponse when the filename is derived from user-supplied input. |
BIT-django-2022-36359
CVE-2022-36359 GHSA-8x94-hmjh-97hq PYSEC-2022-245 |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-03-28T07:44:01.442905+00:00 | Arch Linux Importer | Fixing | VCID-1ay6-j864-aaaq | https://security.archlinux.org/AVG-2810 | 36.0.0 |
| 2024-09-18T01:59:09.702175+00:00 | Arch Linux Importer | Fixing | VCID-1ay6-j864-aaaq | https://security.archlinux.org/AVG-2810 | 34.0.1 |
| 2024-01-03T22:25:27.542828+00:00 | Arch Linux Importer | Fixing | VCID-1ay6-j864-aaaq | https://security.archlinux.org/AVG-2810 | 34.0.0rc1 |