FLAT-QVZPR – Vulnerability | Fluid Attacks Database

Database

Description

multiple issues

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
debian 12	python-django	>=0 <2:2.2.4-1	2:2.2.4-1
debian 13	python-django	>=0 <2:2.2.4-1	2:2.2.4-1
pypi	django	>=1.11a1 <1.11.23 \|\| >=2.1a1 <2.1.11 \|\| >=2.2a1 <2.2.4	1.11.23, 2.1.11, 2.2.4
alpine v3.10	py-django	>=0 <1.11.23-r0	1.11.23-r0
alpine v3.11	py3-django	>=0 <1.11.23-r0	1.11.23-r0
debian 14	python-django	>=0 <2:2.2.4-1	2:2.2.4-1
alpine v3.7	py-django	>=0 <1.11.23-r0	1.11.23-r0
alpine v3.8	py-django	>=0 <1.11.23-r0	1.11.23-r0
alpine v3.9	py-django	>=0 <1.11.23-r0	1.11.23-r0
alpine v3.12	py3-django	>=0 <1.11.23-r0	1.11.23-r0

1-10 of 12

10

Aliases

1. CVE-2019-142332. NVD-2019-142333. OSV-DEBIAN-2019-142334. OSV-2019-142335. OSV-ALPINE-2019-142336. GHSA-h5jv-4p7w-64jg7. GCVE-2019-142338. SECURITY-TRACKER-CVE-2019-142339. security.gentoo.org10. SECURITY-CVE-2019-14233

References

1. https://docs.djangoproject.com/en/dev/releases/security2. https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2019-12.yaml3. https://groups.google.com/forum/#!topic/django-announce/jIoju2-KLDs4. https://lists.fedoraproject.org/archives/list/[email protected]/message/STVX7X7IDWAH5SKE6MBMY3TEI6ZODBTK5. https://seclists.org/bugtraq/2019/Aug/156. https://security.netapp.com/advisory/ntap-20190828-00027. https://www.debian.org/security/2019/dsa-44988. https://www.djangoproject.com/weblog/2019/aug/01/security-releases9. http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00006.html10. http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00025.html

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.