django-rulengine (0.0.1), drf-httpsig (1.2.0) +2 more potentially affected by CVE-2015-0220 via django (1.7.0)

django PYPI version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-rulengine 0.0.1 - drf-httpsig 1.2.0 - tri-form 1.6.1 - tri-query 1.5.0 Source cves: CVE-2015-0220 Source advisory: MEND:CVE-2015-0220...

django-rulengine (0.0.1), drf-httpsig (1.2.0) +2 more potentially affected by CVE-2015-0221 via django (1.7.0)

django PYPI version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-rulengine 0.0.1 - drf-httpsig 1.2.0 - tri-form 1.6.1 - tri-query 1.5.0 Source cves: CVE-2015-0221 Source advisory: MEND:CVE-2015-0221...