Search for packages
Package details: pkg:alpm/archlinux/python-django@2.1.5-1
purl pkg:alpm/archlinux/python-django@2.1.5-1
Next non-vulnerable version 2.1.6-1
Latest non-vulnerable version 5.1.11-1
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-jefu-dz7u-aaac
Aliases:
CVE-2019-6975
GHSA-wh4h-v3f2-r2pp
PYSEC-2019-18
PYSEC-2019-88
Django 1.11.x before 1.11.19, 2.0.x before 2.0.11, and 2.1.x before 2.1.6 allows Uncontrolled Memory Consumption via a malicious attacker-supplied value to the django.utils.numberformat.format() function.
2.1.6-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-r4bp-3zs8-aaag In Django 1.11.x before 1.11.18, 2.0.x before 2.0.10, and 2.1.x before 2.1.5, an Improper Neutralization of Special Elements in Output Used by a Downstream Component issue exists in django.views.defaults.page_not_found(), leading to content spoofing (in a 404 error page) if a user fails to recognize that a crafted URL has malicious content. CVE-2019-3498
GHSA-337x-4q8g-prc5
PYSEC-2019-17
PYSEC-2019-87

Date Actor Action Vulnerability Source VulnerableCode Version
2025-03-28T07:46:52.385155+00:00 Arch Linux Importer Fixing VCID-r4bp-3zs8-aaag https://security.archlinux.org/AVG-839 36.0.0
2025-03-28T07:46:51.934317+00:00 Arch Linux Importer Affected by VCID-jefu-dz7u-aaac https://security.archlinux.org/AVG-881 36.0.0
2024-10-12T00:59:57.564308+00:00 Arch Linux Importer Fixing VCID-r4bp-3zs8-aaag https://security.archlinux.org/AVG-839 34.0.2
2024-10-12T00:59:57.532950+00:00 Arch Linux Importer Affected by VCID-jefu-dz7u-aaac https://security.archlinux.org/AVG-881 34.0.2
2024-09-18T02:02:13.233125+00:00 Arch Linux Importer Fixing VCID-r4bp-3zs8-aaag https://security.archlinux.org/AVG-839 34.0.1
2024-09-18T02:02:12.818596+00:00 Arch Linux Importer Affected by VCID-jefu-dz7u-aaac https://security.archlinux.org/AVG-881 34.0.1
2024-04-23T19:47:34.528147+00:00 Arch Linux Importer Fixing VCID-r4bp-3zs8-aaag https://security.archlinux.org/AVG-839 34.0.0rc4
2024-04-23T19:47:34.501408+00:00 Arch Linux Importer Affected by VCID-jefu-dz7u-aaac https://security.archlinux.org/AVG-881 34.0.0rc4
2024-01-03T22:28:15.512836+00:00 Arch Linux Importer Fixing VCID-r4bp-3zs8-aaag https://security.archlinux.org/AVG-839 34.0.0rc1
2024-01-03T22:28:15.129259+00:00 Arch Linux Importer Affected by VCID-jefu-dz7u-aaac https://security.archlinux.org/AVG-881 34.0.0rc1