Search for packages
| purl | pkg:alpm/archlinux/python-django@5.1.9-1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-zdny-8vuh-9ycv
Aliases: CVE-2025-48432 GHSA-7xr5-9hcq-chf9 PYSEC-2025-47 |
An issue was discovered in Django 5.2 before 5.2.2, 5.1 before 5.1.10, and 4.2 before 4.2.22. Internal HTTP response logging does not escape request.path, which allows remote attackers to potentially manipulate log output via crafted URLs. This may lead to log injection or forgery when logs are viewed in terminals or processed by external systems. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-6eh4-7hcj-duft | An issue was discovered in Django 4.2 before 4.2.21, 5.1 before 5.1.9, and 5.2 before 5.2.1. The django.utils.html.strip_tags() function is vulnerable to a potential denial-of-service (slow performance) when processing inputs containing large sequences of incomplete HTML tags. The template filter striptags is also vulnerable, because it is built on top of strip_tags(). |
BIT-django-2025-32873
CVE-2025-32873 GHSA-8j24-cjrq-gr2m PYSEC-2025-37 |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-06-05T14:48:53.792536+00:00 | Arch Linux Importer | Affected by | VCID-zdny-8vuh-9ycv | https://security.archlinux.org/AVG-2894 | 36.1.0 |
| 2025-05-20T20:26:36.406983+00:00 | Arch Linux Importer | Fixing | VCID-6eh4-7hcj-duft | https://security.archlinux.org/AVG-2876 | 36.0.0 |