TencentOS Server 4: python-django (TSSA-2024:0158)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0158 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

openSUSE: Security Advisory for python (openSUSE-SU-2022:10103-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for python-django (FEDORA-2023-8fed428c5e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for python-django (FEDORA-2023-a53ab7c969)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 38 : python-django (2023-a53ab7c969)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-a53ab7c969 advisory. Security fix for: - CVE-2023-24580 - CVE-2023-23969 - CVE-2022-41323 - CVE-2022-36359 - CVE-2022-34265 - CVE-2022-28346 - CVE-2022-28347...

Fedora 37 : python-django (2023-8fed428c5e)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-8fed428c5e advisory. Security fix for: - CVE-2023-24580 - CVE-2023-23969 - CVE-2022-41323 - CVE-2022-36359 - CVE-2022-34265 - CVE-2022-28346 - CVE-2022-28347...

[SECURITY] [DSA 5254-1] python-django security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5254-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 15, 2022 https://www.debian.org/security/faq -...

Security fix for the ALT Linux 10 package python3-module-django version 3.2.15-alt1

3.2.15-alt1 built Aug. 30, 2022 Alexey Shabalin in task 305627 Aug. 22, 2022 Alexey Shabalin - new version 3.2.15 - Fixes for the following security vulnerabilities: + CVE-2022-34265 Potential SQL injection via Trunckind and Extractlookupname arguments. + CVE-2022-36359 Potential reflected file...

openSUSE 15 Security Update : python-Django (openSUSE-SU-2022:10103-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2022:10103-1 advisory. - An issue was discovered in the HTTP FileResponse class in Django 3.2 before 3.2.15 and 4.0 before 4.0.7. An application is vulnerable to a...

Security update for python-Django (important)

openSUSE Security Update: Security update for python-Django Announcement ID: openSUSE-SU-2022:10103-1 Rating: important References: 1201923 Cross-References: CVE-2022-36359 CVSS scores: CVE-2022-36359 NVD : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-36359 SUSE: 7.3...

correctiv-chartbuilder (>=0.0.1, <=0.0.5), django-autoconfig (0.3.3) +1 more potentially affected by CVE-2022-36359 +1 more via django (1.8.0rc1)

django PYPI version 1.8.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - correctiv-chartbuilder =0.0.1, =1.0.25, =1.0.27 Source cves: CVE-2022-36359, CVE-2022-45442 Source advisory: OSV:GHSA-8X94-HMJH-97HQ...

teamvault (0.6.1) potentially affected by CVE-2022-36359 +1 more via django (1.10.2)

django PYPI version 1.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - teamvault 0.6.1 Source cves: CVE-2022-36359, CVE-2022-45442 Source advisory: OSV:GHSA-8X94-HMJH-97HQ...

connect-telegram-bot (>=1.0.0, <=1.0.1), nemo (>=3.9.0, <=3.9.1) +1 more potentially affected by CVE-2022-36359 +1 more via django (2.2.19)

django PYPI version 2.2.19 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - connect-telegram-bot =1.0.0, =3.9.0, =1.0.3, =1.0.6 Source cves: CVE-2022-36359, CVE-2022-45442 Source advisory: OSV:GHSA-8X94-HMJH-97HQ...

acclaim-badges (0.1.0), aimmo (>=0.1.0b2696.post0.dev1, <=0.27.4b5229) +100 more potentially affected by CVE-2022-36359 +1 more via django (1.10.8)

django PYPI version 1.10.8 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - acclaim-badges 0.1.0 - aimmo =0.1.0b2696.post0.dev1, =0.2.1, =2.0.0, =0.3.1, =2.1.1.16070820, =2.1.1.16072018, =2.1.1.16070812, =1.0.0, =1.1.0 -...

django-email-testview (>=0.0.1, <=0.1.0), django-polls-tutorial-v (>=1.0.1, <=1.2.6) +4 more potentially affected by CVE-2022-36359 +1 more via django (2.2.2)

django PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-email-testview =0.0.1, =1.0.1, =0.1.0, =1.0.1, =21.4.0rc1, =21.4.0rc4 Source cves: CVE-2022-36359, CVE-2022-45442 Source advisory:...

gerapy (>=0.8.7, <=0.9.3a2), ora2 (2.4.4) potentially affected by CVE-2022-36359 +1 more via django (1.11.26)

django PYPI version 1.11.26 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - gerapy =0.8.7, =0.9.3a2 - ora2 2.4.4 Source cves: CVE-2022-36359, CVE-2022-45442 Source advisory: OSV:GHSA-8X94-HMJH-97HQ...

django-leaflet-storage (0.8.0b0), django-mercadopago-simple (2.1.0) +1 more potentially affected by CVE-2022-36359 +1 more via django (1.8.5)

django PYPI version 1.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-leaflet-storage 0.8.0b0 - django-mercadopago-simple 2.1.0 - teamvault =0.5.0, =0.5.1 Source cves: CVE-2022-36359, CVE-2022-45442 Source...

kwikapi-django (>=0.2.6, <=0.2.8), nemo (>=1.14.4, <=1.21.1) +1 more potentially affected by CVE-2022-36359 +1 more via django (1.11.23)

django PYPI version 1.11.23 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - kwikapi-django =0.2.6, =1.14.4, =1.21.1 - pyblue 2022.8.1 Source cves: CVE-2022-36359, CVE-2022-45442 Source advisory: OSV:GHSA-8X94-HMJH-97HQ...

iepy (0.9.5) potentially affected by CVE-2022-36359 +1 more via django (1.7.6)

django PYPI version 1.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - iepy 0.9.5 Source cves: CVE-2022-36359, CVE-2022-45442 Source advisory: OSV:GHSA-8X94-HMJH-97HQ...

django-rstblog (>=0.1.0, <=0.1.1), drf-user (0.0.1) +2 more potentially affected by CVE-2022-36359 +1 more via django (2.0.7)

django PYPI version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-rstblog =0.1.0, =0.1.1 - drf-user 0.0.1 - drfaddons 0.0.3 - umap-project 1.0.0rc1 Source cves: CVE-2022-36359, CVE-2022-45442 Source advisory...