Search for packages
Package details: pkg:pypi/django@0.91
purl pkg:pypi/django@0.91
Tags Ghost
Next non-vulnerable version 4.2.22
Latest non-vulnerable version 5.2.2
Risk 4.0
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-14ux-yqja-aaar
Aliases:
CVE-2007-5712
GHSA-9v8h-57gv-qch6
PYSEC-2007-1
The internationalization (i18n) framework in Django 0.91, 0.95, 0.95.1, and 0.96, and as used in other products such as PyLucid, when the USE_I18N option and the i18n component are enabled, allows remote attackers to cause a denial of service (memory consumption) via many HTTP requests with large Accept-Language headers.
0.91.1
Affected by 0 other vulnerabilities.
0.95.2
Affected by 0 other vulnerabilities.
0.96.1
Affected by 0 other vulnerabilities.
1.1
Affected by 44 other vulnerabilities.
VCID-gskh-8gyx-aaah
Aliases:
CVE-2008-2302
GHSA-54qj-48vx-cr9f
PYSEC-2008-1
Cross-site scripting (XSS) vulnerability in the login form in the administration application in Django 0.91 before 0.91.2, 0.95 before 0.95.3, and 0.96 before 0.96.2 allows remote attackers to inject arbitrary web script or HTML via the URI of a certain previous request.
0.91.2
Affected by 0 other vulnerabilities.
0.95.3
Affected by 0 other vulnerabilities.
0.96.2
Affected by 0 other vulnerabilities.
1.1
Affected by 44 other vulnerabilities.
VCID-k7je-vdc4-aaar
Aliases:
CVE-2008-3909
GHSA-r5cj-wv24-92p5
PYSEC-2008-2
The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP POST requests and processes them after successful authentication occurs, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and delete or modify data via unspecified requests.
0.91.3
Affected by 0 other vulnerabilities.
0.95.4
Affected by 0 other vulnerabilities.
0.96.3
Affected by 0 other vulnerabilities.
1.1
Affected by 44 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2024-09-17T22:26:49.875065+00:00 GitLab Importer Affected by VCID-gskh-8gyx-aaah https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/Django/CVE-2008-2302.yml 34.0.1
2024-09-17T22:26:49.345071+00:00 GitLab Importer Affected by VCID-k7je-vdc4-aaar https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/Django/CVE-2008-3909.yml 34.0.1
2024-09-17T22:13:38.450492+00:00 GHSA Importer Affected by VCID-gskh-8gyx-aaah https://github.com/advisories/GHSA-54qj-48vx-cr9f 34.0.1
2024-05-22T00:07:19.388719+00:00 GHSA Importer Affected by VCID-gskh-8gyx-aaah https://github.com/advisories/GHSA-54qj-48vx-cr9f 34.0.0rc4
2024-04-29T16:07:06.425852+00:00 GHSA Importer Affected by VCID-14ux-yqja-aaar https://github.com/advisories/GHSA-9v8h-57gv-qch6 34.0.0rc4
2024-04-29T15:36:31.906132+00:00 GithubOSV Importer Affected by VCID-14ux-yqja-aaar https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-9v8h-57gv-qch6/GHSA-9v8h-57gv-qch6.json 34.0.0rc4
2024-04-23T23:08:20.115116+00:00 GithubOSV Importer Affected by VCID-k7je-vdc4-aaar https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-r5cj-wv24-92p5/GHSA-r5cj-wv24-92p5.json 34.0.0rc4
2024-01-03T17:52:47.311552+00:00 GitLab Importer Affected by VCID-gskh-8gyx-aaah https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/Django/CVE-2008-2302.yml 34.0.0rc1
2024-01-03T17:52:46.752158+00:00 GitLab Importer Affected by VCID-k7je-vdc4-aaar https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/Django/CVE-2008-3909.yml 34.0.0rc1
2024-01-03T17:43:49.194087+00:00 GHSA Importer Affected by VCID-k7je-vdc4-aaar https://github.com/advisories/GHSA-r5cj-wv24-92p5 34.0.0rc1
2024-01-03T17:43:49.058090+00:00 GHSA Importer Affected by VCID-gskh-8gyx-aaah https://github.com/advisories/GHSA-54qj-48vx-cr9f 34.0.0rc1