FreshPorts - VuXML

Django reports:

CVE-2023-41164: Potential denial of service vulnerability in django.utils.encoding.uri_to_iri().

< 3.2.21

< 4.1.11

< 4.2.5

Django reports:

CVE-2023-24580: Potential denial-of-service vulnerability in file uploads.

< 3.2.18

< 4.0.10

< 4.1.7

Django reports:

CVE-2023-31047: Potential bypass of validation when uploading multiple files using one form field.

< 3.2.19

< 4.1.9

< 4.2.1

Django reports:

CVE-2023-23969: Potential denial-of-service via Accept-Language headers.

< 3.2.17

< 4.0.9

< 4.1.6

SO-AND-SO reports:

CVE-2022-34265: Potential SQL injection via Trunc(kind) and Extract(lookup_name) arguments.

< 3.2.14

< 4.0.6

Django reports:

CVE-2024-27351: Potential regular expression denial-of-service in django.utils.text.Truncator.words().

< 3.2.25

< 4.2.11

< 5.0.3

Django Release reports:

CVE-2022-28346: Potential SQL injection in QuerySet.annotate(), aggregate(), and extra().

CVE-2022-28347: Potential SQL injection via QuerySet.explain(**options) on PostgreSQL.

< 2.2.28

< 3.2.13

< 4.0.4

Django reports:

CVE-2022-36359: Potential reflected file download vulnerability in FileResponse.

< 3.2.15

< 4.0.7

Django reports:

CVE-2024-24680:Potential denial-of-service in intcomma template filter.

< 3.2.24

< 4.2.8

< 5.0.2

Django reports:

CVE-2023-36053: Potential regular expression denial of service vulnerability in EmailValidator/URLValidator.

< 3.2.20

< 4.1.10

< 4.2.3

Django Release reports:

CVE-2021-45115: Denial-of-service possibility in UserAttributeSimilarityValidator.

CVE-2021-45116: Potential information disclosure in dictsort template filter.

CVE-2021-45452: Potential directory-traversal via Storage.save().

< 2.2.26

< 3.2.11

< 4.0.1

Django reports:

CVE-2022-41323: Potential denial-of-service vulnerability in internationalized URLs.

< 3.2.16

< 4.0.8

< 4.1.2

Django reports:

CVE-2023-43665: Denial-of-service possibility in django.utils.text.Truncator.

< 3.2.22

< 4.1.12

< 4.2.6