VulnerableCode Package Details - pkg:pypi/django@1.9a0

Search for packages

Package details: pkg:pypi/django@1.9a0

Essentials
History (4)

purl	pkg:pypi/django@1.9a0
Tags	Ghost

Next non-vulnerable version	4.2.22
Latest non-vulnerable version	5.2.2
Risk	4.0

Vulnerabilities affecting this package (2)

Vulnerability	Summary	Fixed by
VCID-g3n7-gan2-aaap Aliases: CVE-2015-8213 GHSA-6wcr-wcqm-3mfh PYSEC-2015-11	The get_format function in utils/formats.py in Django before 1.7.x before 1.7.11, 1.8.x before 1.8.7, and 1.9.x before 1.9rc2 might allow remote attackers to obtain sensitive application secrets via a settings key in place of a date/time format setting, as demonstrated by SECRET_KEY.	1.9rc2 Affected by 19 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-gsph-he7y-aaak Aliases: CVE-2016-2048 GHSA-46x4-9jmv-jc8p PYSEC-2016-14	Django 1.9.x before 1.9.2, when ModelAdmin.save_as is set to True, allows remote authenticated users to bypass intended access restrictions and create ModelAdmin objects via the "Save as New" option when editing objects and leveraging the "change" permission.	1.9.2 Affected by 19 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}

Vulnerabilities fixed by this package (0)

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2024-09-17T22:26:47.739023+00:00	GitLab Importer	Affected by	VCID-g3n7-gan2-aaap	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/Django/CVE-2015-8213.yml	34.0.1
2024-09-17T22:26:40.332126+00:00	GitLab Importer	Affected by	VCID-gsph-he7y-aaak	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/Django/CVE-2016-2048.yml	34.0.1
2024-01-03T17:52:45.349481+00:00	GitLab Importer	Affected by	VCID-g3n7-gan2-aaap	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/Django/CVE-2015-8213.yml	34.0.0rc1
2024-01-03T17:52:39.230100+00:00	GitLab Importer	Affected by	VCID-gsph-he7y-aaak	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/Django/CVE-2016-2048.yml	34.0.0rc1