Fedora: Security Advisory (FEDORA-2024-396c94f0a3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux Distros Unpatched Vulnerability : CVE-2024-45230

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16. The urlize and urlizetrunc template filters are subject to a...

OESA-2024-2281 python-django security update

Django is a high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fixes: An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16. The urlize and urlizetrunc template filters are subject to a potential...

CVE-2024-45230

creationtimestamp| type| source ---|---|--- 2024-10-08 18:43:32+00:00| seen| https://t.me/cvedetector/7372 2025-02-05 20:13:27+00:00| seen| https://bsky.app/profile/securitycipher.bsky.social/post/3lhhf344rf22v...

aldryn-django (5.0.2.0), artd-customer (>=0.0.20, <=0.0.23) +76 more potentially affected by CVE-2024-45230 via django (>=5.0.0, <=5.0.8)

django PYPI version =5.0.0, =0.0.20, =0.0.13, =0.0.19, =0.0.34, =0.0.50, =0.0.5, =0.0.11, =1.0.3, =0.1.0, =0.1.0, =1.0.0, =6.0.0, =6.3.3 and more Source cves: CVE-2024-45230 Source advisory: OSV:GHSA-5HGC-2VFP-MQVC...

admin-auth0 (>=0.1.1, <=0.1.5), alcali (3006.3.0) +127 more potentially affected by CVE-2024-45230 via django (>=4.2.0, <=4.2.15)

django PYPI version =4.2.0, =0.1.1, =4.2.6.0, =7.5.0a0, =1.1.0a0, =1.0.2, =0.0.1, =0.4.0, =4.16.2, =4.8.0, =0.1.0, =0.0.4.dev0, =0.0.5.dev0 - coldfront 1.1.6 and more Source cves: CVE-2024-45230 Source advisory: GHSA-5HGC-2VFP-MQVC...

django-blocklist (>=2.7.0, <=2.8.0), django-etf-api (0.1.0) +13 more potentially affected by CVE-2024-45230 via django (5.1.0)

django PYPI version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-blocklist =2.7.0, =1.0.3, =0.6.2, =0.146.0, =0.2.30, =1.0.0, =0.3.19, =0.91.0, =2.6.0b0, =2.6.0b2 Source cves: CVE-2024-45230 Source advisory...

django-blocklist (>=2.7.0, <=2.8.0), django-etf-api (0.1.0) +13 more potentially affected by CVE-2024-45230 via django (5.1.0)

django PYPI version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-blocklist =2.7.0, =1.0.3, =0.6.2, =0.146.0, =0.2.30, =1.0.0, =0.3.19, =0.91.0, =2.6.0b0, =2.6.0b2 Source cves: CVE-2024-45230 Source advisory...

aldryn-django (5.0.2.0), artd-customer (>=0.0.20, <=0.0.23) +76 more potentially affected by CVE-2024-45230 via django (>=5.0.0, <=5.0.8)

django PYPI version =5.0.0, =0.0.20, =0.0.13, =0.0.19, =0.0.34, =0.0.50, =0.0.5, =0.0.11, =1.0.3, =0.1.0, =0.1.0, =1.0.0, =6.0.0, =6.3.3 and more Source cves: CVE-2024-45230 Source advisory: MEND:CVE-2024-45230...

admin-auth0 (>=0.1.1, <=0.1.5), alcali (3006.3.0) +127 more potentially affected by CVE-2024-45230 via django (>=4.2.0, <=4.2.15)

django PYPI version =4.2.0, =0.1.1, =4.2.6.0, =7.5.0a0, =1.1.0a0, =1.0.2, =0.0.1, =0.4.0, =4.16.2, =4.8.0, =0.1.0, =0.0.4.dev0, =0.0.5.dev0 - coldfront 1.1.6 and more Source cves: CVE-2024-45230 Source advisory: MEND:CVE-2024-45230...

django-blocklist (>=2.7.0, <=2.8.0), django-etf-api (0.1.0) +13 more potentially affected by CVE-2024-45230 via django (5.1.0)

django PYPI version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-blocklist =2.7.0, =1.0.3, =0.6.2, =0.146.0, =0.2.30, =1.0.0, =0.3.19, =0.91.0, =2.6.0b0, =2.6.0b2 Source cves: CVE-2024-45230 Source advisory...

SUSE-SU-2024:3187-1 Security update for python-Django

This update for python-Django fixes the following issues: There is an issue with the previous fix for CVE-2024-45230. Please consider the following vulnerability fixed only after the installation of this update. - CVE-2024-45230: Fixed potential denial-of-service vulnerability in...

openSUSE Security Advisory (SUSE-SU-2024:3161-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2024:3139-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2024:0282-1 Security update for python-Django

This update for python-Django fixes the following issues: CVE-2024-45230: Fixed Potential denial-of-service vulnerability in django.utils.html.urlize boo1229823 CVE-2024-45231: Potential user email enumeration via response status on password reset boo1229824...

SUSE CVE-2024-45230

An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16. The urlize and urlizetrunc template filters are subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters...

Python Library Django 4.2.x < 4.2.16 / 5.0.x < 5.0.9 / 5.1.x < 5.1.1 Multiple Vulnerabilities

The detected version of the Django Python package, Django, is 4.2.x prior to 4.2.16, 5.0.x prior to 5.0.9 or 5.1.x prior to 5.1.1. It is, therefore, affected by multiple vulnerabilities as disclosed in Django's September 3rd 2024 security advisory: - urlize and urlizetrunc were subject to a...

Django 4.x < 4.2.16, 5.0.x < 5.0.9, 5.1.x < 5.1.1 Multiple Vulnerabilities - Windows

Django is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:djangoproject:django"; if descriptio...

SUSE-SU-2024:3139-1 Security update for python-Django

This update for python-Django fixes the following issues: - CVE-2024-45230: Fixed potential denial-of-service vulnerability in django.utils.html.urlize. bsc1229823 - CVE-2024-45231: Fixed potential user email enumeration via response status on password reset. bsc1229824...

Ubuntu: Security Advisory (USN-6987-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...