Search for packages
Package details: pkg:pypi/django@1.0.0
purl pkg:pypi/django@1.0.0
Tags Ghost
Next non-vulnerable version 4.2.22
Latest non-vulnerable version 5.2.2
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-z1hp-6qm3-aaac
Aliases:
CVE-2009-3695
GHSA-p6m5-h7pp-v2x5
PYSEC-2009-4
Algorithmic complexity vulnerability in the forms library in Django 1.0 before 1.0.4 and 1.1 before 1.1.1 allows remote attackers to cause a denial of service (CPU consumption) via a crafted (1) EmailField (email address) or (2) URLField (URL) that triggers a large amount of backtracking in a regular expression.
1.0.4
Affected by 44 other vulnerabilities.
1.1.1
Affected by 43 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2024-05-22T21:04:49.278107+00:00 GHSA Importer Affected by VCID-z1hp-6qm3-aaac https://github.com/advisories/GHSA-p6m5-h7pp-v2x5 34.0.0rc4