Search for packages
Package details: pkg:alpm/archlinux/python-django@1.10.2-1
purl pkg:alpm/archlinux/python-django@1.10.2-1
Next non-vulnerable version 1.10.3-1
Latest non-vulnerable version 5.1.11-1
Risk 4.5
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-n4jb-683r-aaar
Aliases:
CVE-2016-9013
GHSA-mv8g-fhh6-6267
PYSEC-2016-17
Django 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3 use a hardcoded password for a temporary database user created when running tests with an Oracle database, which makes it easier for remote attackers to obtain access to the database server by leveraging failure to manually specify a password in the database settings TEST dictionary.
1.10.3-1
Affected by 0 other vulnerabilities.
VCID-shuh-ae95-aaah
Aliases:
CVE-2016-9014
GHSA-3f2c-jm6v-cr35
PYSEC-2016-18
Django before 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3, when settings.DEBUG is True, allow remote attackers to conduct DNS rebinding attacks by leveraging failure to validate the HTTP Host header against settings.ALLOWED_HOSTS.
1.10.3-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-03-28T07:46:19.259553+00:00 Arch Linux Importer Affected by VCID-n4jb-683r-aaar https://security.archlinux.org/AVG-57 36.0.0
2025-03-28T07:46:19.238960+00:00 Arch Linux Importer Affected by VCID-shuh-ae95-aaah https://security.archlinux.org/AVG-57 36.0.0
2024-10-12T00:59:57.083040+00:00 Arch Linux Importer Affected by VCID-n4jb-683r-aaar https://security.archlinux.org/AVG-57 34.0.2
2024-10-12T00:59:57.051351+00:00 Arch Linux Importer Affected by VCID-shuh-ae95-aaah https://security.archlinux.org/AVG-57 34.0.2
2024-09-18T02:01:31.102163+00:00 Arch Linux Importer Affected by VCID-n4jb-683r-aaar https://security.archlinux.org/AVG-57 34.0.1
2024-09-18T02:01:31.077757+00:00 Arch Linux Importer Affected by VCID-shuh-ae95-aaah https://security.archlinux.org/AVG-57 34.0.1
2024-04-23T19:47:33.544724+00:00 Arch Linux Importer Affected by VCID-n4jb-683r-aaar https://security.archlinux.org/AVG-57 34.0.0rc4
2024-04-23T19:47:33.522583+00:00 Arch Linux Importer Affected by VCID-shuh-ae95-aaah https://security.archlinux.org/AVG-57 34.0.0rc4
2024-01-03T22:27:40.503816+00:00 Arch Linux Importer Affected by VCID-n4jb-683r-aaar https://security.archlinux.org/AVG-57 34.0.0rc1
2024-01-03T22:27:40.477708+00:00 Arch Linux Importer Affected by VCID-shuh-ae95-aaah https://security.archlinux.org/AVG-57 34.0.0rc1