16007 matches found
GHSA-M9G8-FXXM-XG86 vulnerabilities
Vulnerabilities for packages: py3-django...
admin-auth0 (>=0.1.1, <=0.1.5), alcali (3006.3.0) +137 more potentially affected by CVE-2024-53908 via django (>=4.2.0, <=4.2.16)
django PYPI version =4.2.0, =0.1.1, =4.2.6.0, =65.10.0, =7.5.0a0, =1.1.0a0, =1.0.2, =0.0.1, =0.4.0, =4.16.2, =4.8.0, =0.1.0, =0.138.3 and more Source cves: CVE-2024-53908 Source advisory: OSV:PYSEC-2024-157...
aldryn-django (5.0.2.0), artd-customer (>=0.0.20, <=0.0.23) +77 more potentially affected by CVE-2024-53908 via django (>=5.0.0, <=5.0.9)
django PYPI version =5.0.0, =0.0.20, =0.0.13, =0.0.19, =0.0.34, =0.0.50, =0.0.5, =0.0.11, =1.0.3, =0.1.0, =0.1.0, =1.0.0, =6.0.0, =6.3.3 and more Source cves: CVE-2024-53908 Source advisory: OSV:PYSEC-2024-157...
bma (0.2.0a1), chromatrace (>=0.1.6, <=0.1.7) +30 more potentially affected by CVE-2024-53908 via django (>=5.1.0, <=5.1.3)
django PYPI version =5.1.0, =0.1.6, =0.0.3, =0.0.15, =2.7.0, =0.92.0, =1.0.3, =0.6.2, =0.0.86, =0.1.0, =5.1.0, =5.1.3 and more Source cves: CVE-2024-53908 Source advisory: OSV:PYSEC-2024-157...
CVE-2024-53908
An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. Direct usage of the django.db.models.fields.json.HasKey lookup, when an Oracle database is used, is subject to SQL injection if untrusted data is used as an lhs value. Applications that use the...
CVE-2024-53908 vulnerabilities
Vulnerabilities for packages: py3-django...
DEBIAN-CVE-2024-53908
An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. Direct usage of the django.db.models.fields.json.HasKey lookup, when an Oracle database is used, is subject to SQL injection if untrusted data is used as an lhs value. Applications that use the...
PYSEC-2024-157
An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. Direct usage of the django.db.models.fields.json.HasKey lookup, when an Oracle database is used, is subject to SQL injection if untrusted data is used as an lhs value. Applications that use the...
PYSEC-2024-157
An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. Direct usage of the django.db.models.fields.json.HasKey lookup, when an Oracle database is used, is subject to SQL injection if untrusted data is used as an lhs value. Applications that use the...
CVE-2024-53908 vulnerabilities
Vulnerabilities for packages: py3-django, awx...
aldryn-django (5.0.2.0), artd-customer (>=0.0.20, <=0.0.23) +77 more potentially affected by CVE-2024-53907 via django (>=5.0.0, <=5.0.9)
django PYPI version =5.0.0, =0.0.20, =0.0.13, =0.0.19, =0.0.34, =0.0.50, =0.0.5, =0.0.11, =1.0.3, =0.1.0, =0.1.0, =1.0.0, =6.0.0, =6.3.3 and more Source cves: CVE-2024-53907 Source advisory: OSV:PYSEC-2024-156...
bma (0.2.0a1), chromatrace (>=0.1.6, <=0.1.7) +30 more potentially affected by CVE-2024-53907 via django (>=5.1.0, <=5.1.3)
django PYPI version =5.1.0, =0.1.6, =0.0.3, =0.0.15, =2.7.0, =0.92.0, =1.0.3, =0.6.2, =0.0.86, =0.1.0, =5.1.0, =5.1.3 and more Source cves: CVE-2024-53907 Source advisory: OSV:PYSEC-2024-156...
CVE-2024-53907
An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. The striptags method and striptags template filter are subject to a potential denial-of-service attack via certain inputs containing large sequences of nested incomplete HTML entities...
admin-auth0 (>=0.1.1, <=0.1.5), alcali (3006.3.0) +137 more potentially affected by CVE-2024-53907 via django (>=4.2.0, <=4.2.16)
django PYPI version =4.2.0, =0.1.1, =4.2.6.0, =65.10.0, =7.5.0a0, =1.1.0a0, =1.0.2, =0.0.1, =0.4.0, =4.16.2, =4.8.0, =0.1.0, =0.138.3 and more Source cves: CVE-2024-53907 Source advisory: OSV:PYSEC-2024-156...
PYSEC-2024-156
An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. The striptags method and striptags template filter are subject to a potential denial-of-service attack via certain inputs containing large sequences of nested incomplete HTML entities...
DEBIAN-CVE-2024-53907
An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. The striptags method and striptags template filter are subject to a potential denial-of-service attack via certain inputs containing large sequences of nested incomplete HTML entities...
PYSEC-2024-156
An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. The striptags method and striptags template filter are subject to a potential denial-of-service attack via certain inputs containing large sequences of nested incomplete HTML entities...
CVE-2024-53907 vulnerabilities
Vulnerabilities for packages: py3-django, awx...
CVE-2024-53907 vulnerabilities
Vulnerabilities for packages: py3-django...
SUSE CVE-2024-53907
An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. The striptags method and striptags template filter are subject to a potential denial-of-service attack via certain inputs containing large sequences of nested incomplete HTML entities...