py3-django vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the py3-django package. This does not include vulnerabilities belonging to this package’s dependencies.

How to fix?

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Fix for free
VulnerabilityVulnerable Version
  • H
Download of Code Without Integrity Check

<3.2.16-r0
  • H
CVE-2022-41323

<3.2.16-r0
  • C
SQL Injection

<3.2.14-r0
  • C
SQL Injection

<3.2.13-r0
  • C
SQL Injection

<3.2.13-r0
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

<3.2.12-r0
  • M
Cross-site Scripting (XSS)

<3.2.12-r0
  • H
CVE-2021-45115

<3.2.12-r0
  • H
CVE-2021-44420

<3.2.12-r0
  • H
Improper Input Validation

<3.2.12-r0
  • M
Directory Traversal

<3.2.12-r0
  • M
Improper Certificate Validation

<3.0.7-r0
  • M
Directory Traversal

<3.1.6-r0
  • M
Cross-site Scripting (XSS)

<3.0.7-r0
  • H
Incorrect Default Permissions

<3.1.1-r0
  • H
Incorrect Default Permissions

<3.1.1-r0
  • H
SQL Injection

<1.11.29-r0
  • M
Cleartext Transmission of Sensitive Information

<1.11.22-r0
  • H
Uncontrolled Recursion

<1.11.23-r0
  • H
Resource Exhaustion

<1.11.23-r0
  • H
Resource Exhaustion

<1.11.23-r0
  • C
SQL Injection

<3.1.13-r0
  • M
Directory Traversal

<3.1.13-r0
  • H
Server-Side Request Forgery (SSRF)

<3.1.13-r0
  • M
Directory Traversal

<3.1.8-r0
  • M
HTTP Request Smuggling

<3.1.7-r0
  • C
SQL Injection

<1.11.28-r0
  • C
Weak Password Recovery Mechanism for Forgotten Password

<1.11.27-r0
  • C
SQL Injection

<1.11.23-r0
  • M
Cross-site Scripting (XSS)

<1.11.21-r0
  • H
Allocation of Resources Without Limits or Throttling

<1.11.19-r0
  • M
Improper Input Validation

<1.11.18-r0
  • M
Open Redirect

<1.11.15-r0
  • M
Incorrect Regular Expression

<1.11.11-r0
  • M
Incorrect Regular Expression

<1.11.11-r0
  • H
Information Exposure

<1.11.10-r0
  • M
Cross-site Scripting (XSS)

<1.11.5-r0
  • M
Open Redirect

<1.10.7-r0
  • M
Open Redirect

<1.10.7-r0
  • H
Access Restriction Bypass

<1.8.16-r0
  • C
Use of Hard-coded Credentials

<1.8.16-r0