PT-2026-36544

Name of the Vulnerable Software and Affected Versions bandit versions 0.3.6 through 1.10.x Description An issue in the deserialize/2 function within Elixir.Bandit.HTTP2.Frame allows unauthenticated memory exhaustion through oversized HTTP/2 frames. The system checks the SETTINGS MAX FRAME SIZE...

PT-2017-3841 · Django +1 · Django +1

Name of the Vulnerable Software and Affected Versions: Django versions 1.10.x through 1.10.7 Django versions 1.11.x through 1.11.4 Description: The issue is related to the disabling of HTML autoescaping in a portion of the template for the technical 500 debug page in Django. This could allow a...