Server side cross-site scripting In python-django
Description
cross-site scripting
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 debian 13 | >=0 <1:1.11.21-1 | 1:1.11.21-1 | |
 pypi | >=1.11a1 <1.11.21 || >=2.1a1 <2.1.9 || >=2.2a1 <2.2.2 | 1.11.21, 2.1.9, 2.2.2 | |
 alpine v3.10 | =1.10.5-r0 || =1.10.7-r0 || =1.11-r0 || =1.11-r1 || =1.11.10-r0 || =1.11.11-r0 || =1.11.12-r0 || =1.11.13-r0 || =1.11.15-r0 || =1.11.18-r0 || =1.11.20-r0 || =1.11.20-r1 || =1.11.5-r0 || =1.11.9-r0 || =1.2.5-r0 || =1.2.5-r1 || =1.4.1-r0 || =1.5-r0 || =1.5.1-r0 || =1.5.5-r0 || =1.5.6-r0 || =1.5.7-r0 || =1.5.8-r0 || =1.6.5-r0 || =1.6.6-r0 || =1.7-r0 || =1.8-r0 || =1.8.10-r0 || =1.8.12-r0 || =1.8.14-r0 || =1.8.15-r0 || =1.8.16-r0 || =1.8.3-r0 || =1.8.4-r0 || =1.8.6-r0 || =1.8.7-r0 || =1.8.8-r0 || >=0 <1.11.21-r0 | 1.11.21-r0 | |
alpine v3.8 | =1.10.5-r0 || =1.10.7-r0 || =1.11-r0 || =1.11-r1 || =1.11.10-r0 || =1.11.11-r0 || =1.11.12-r0 || =1.11.13-r0 || =1.11.15-r0 || =1.11.18-r0 || =1.11.20-r0 || =1.11.5-r0 || =1.11.9-r0 || =1.2.5-r0 || =1.2.5-r1 || =1.4.1-r0 || =1.5-r0 || =1.5.1-r0 || =1.5.5-r0 || =1.5.6-r0 || =1.5.7-r0 || =1.5.8-r0 || =1.6.5-r0 || =1.6.6-r0 || =1.7-r0 || =1.8-r0 || =1.8.10-r0 || =1.8.12-r0 || =1.8.14-r0 || =1.8.15-r0 || =1.8.16-r0 || =1.8.3-r0 || =1.8.4-r0 || =1.8.6-r0 || =1.8.7-r0 || =1.8.8-r0 || >=0 <1.11.21-r0 | 1.11.21-r0 | |
alpine v3.9 | =1.10.5-r0 || =1.10.7-r0 || =1.11-r0 || =1.11-r1 || =1.11.10-r0 || =1.11.11-r0 || =1.11.12-r0 || =1.11.13-r0 || =1.11.15-r0 || =1.11.18-r0 || =1.11.20-r0 || =1.11.5-r0 || =1.11.9-r0 || =1.2.5-r0 || =1.2.5-r1 || =1.4.1-r0 || =1.5-r0 || =1.5.1-r0 || =1.5.5-r0 || =1.5.6-r0 || =1.5.7-r0 || =1.5.8-r0 || =1.6.5-r0 || =1.6.6-r0 || =1.7-r0 || =1.8-r0 || =1.8.10-r0 || =1.8.12-r0 || =1.8.14-r0 || =1.8.15-r0 || =1.8.16-r0 || =1.8.3-r0 || =1.8.4-r0 || =1.8.6-r0 || =1.8.7-r0 || =1.8.8-r0 || >=0 <1.11.21-r0 | 1.11.21-r0 | |
alpine v3.11 | =1.10.5-r0 || =1.10.7-r0 || =1.11-r0 || =1.11-r1 || =1.11.10-r0 || =1.11.11-r0 || =1.11.12-r0 || =1.11.13-r0 || =1.11.15-r0 || =1.11.18-r0 || =1.11.20-r0 || =1.11.20-r1 || =1.11.5-r0 || =1.11.9-r0 || =1.2.5-r0 || =1.2.5-r1 || =1.4.1-r0 || =1.5-r0 || =1.5.1-r0 || =1.5.5-r0 || =1.5.6-r0 || =1.5.7-r0 || =1.5.8-r0 || =1.6.5-r0 || =1.6.6-r0 || =1.7-r0 || =1.8-r0 || =1.8.10-r0 || =1.8.12-r0 || =1.8.14-r0 || =1.8.15-r0 || =1.8.16-r0 || =1.8.3-r0 || =1.8.4-r0 || =1.8.6-r0 || =1.8.7-r0 || =1.8.8-r0 || >=0 <1.11.21-r0 | 1.11.21-r0 | |
alpine v3.12 | =1.10.5-r0 || =1.10.7-r0 || =1.11-r0 || =1.11-r1 || =1.11.10-r0 || =1.11.11-r0 || =1.11.12-r0 || =1.11.13-r0 || =1.11.15-r0 || =1.11.18-r0 || =1.11.20-r0 || =1.11.20-r1 || =1.11.5-r0 || =1.11.9-r0 || =1.2.5-r0 || =1.2.5-r1 || =1.4.1-r0 || =1.5-r0 || =1.5.1-r0 || =1.5.5-r0 || =1.5.6-r0 || =1.5.7-r0 || =1.5.8-r0 || =1.6.5-r0 || =1.6.6-r0 || =1.7-r0 || =1.8-r0 || =1.8.10-r0 || =1.8.12-r0 || =1.8.14-r0 || =1.8.15-r0 || =1.8.16-r0 || =1.8.3-r0 || =1.8.4-r0 || =1.8.6-r0 || =1.8.7-r0 || =1.8.8-r0 || >=0 <1.11.21-r0 | 1.11.21-r0 | |
debian 14 | >=0 <1:1.11.21-1 | 1:1.11.21-1 | |
debian 11 | >=0 <1:1.11.21-1 | 1:1.11.21-1 | |
alpine v3.7 | =1.10.5-r0 || =1.10.7-r0 || =1.11-r0 || =1.11-r1 || =1.11.11-r0 || =1.11.15-r0 || =1.11.18-r0 || =1.11.20-r0 || =1.11.5-r0 || =1.2.5-r0 || =1.2.5-r1 || =1.4.1-r0 || =1.5-r0 || =1.5.1-r0 || =1.5.5-r0 || =1.5.6-r0 || =1.5.7-r0 || =1.5.8-r0 || =1.6.5-r0 || =1.6.6-r0 || =1.7-r0 || =1.8-r0 || =1.8.10-r0 || =1.8.12-r0 || =1.8.14-r0 || =1.8.15-r0 || =1.8.16-r0 || =1.8.3-r0 || =1.8.4-r0 || =1.8.6-r0 || =1.8.7-r0 || =1.8.8-r0 || >=0 <1.11.21-r0 | 1.11.21-r0 |
1-10 of 12
10
Aliases
References
1. https://github.com/django/django/commit/09186a13d975de6d049f8b3e05484f66b01ece622. https://github.com/django/django/commit/afddabf8428ddc89a332f7a78d0d21eaf2b5a6733. https://github.com/django/django/commit/c238701859a52d584f349cce15d56c8e8137c52b4. https://www.djangoproject.com/weblog/2019/jun/03/security-releases5. https://www.debian.org/security/2019/dsa-44766. https://usn.ubuntu.com/4043-17. https://seclists.org/bugtraq/2019/Jul/108. https://lists.fedoraproject.org/archives/list/[email protected]/message/USYRARSYB7PE3S2ZQO7PZNWMH7RPGL5G9. https://groups.google.com/forum/#!topic/django-announce/GEbHU7YoVz810. https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2019-79.yaml11. https://docs.djangoproject.com/en/dev/releases/security12. https://docs.djangoproject.com/en/dev/releases/2.2.213. https://docs.djangoproject.com/en/dev/releases/2.1.914. https://docs.djangoproject.com/en/dev/releases/1.11.2115. http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00006.html16. http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00025.html17. http://www.openwall.com/lists/oss-security/2019/06/03/2
Does your application use this vulnerable software?
During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.