django-registration@2.1 vulnerabilities

An extensible user-registration application for Django.

  • latest version

    5.1.0

  • latest non vulnerable version

  • first published

    16 years ago

  • latest version published

    2 months ago

  • licenses detected

  • Direct Vulnerabilities

    Known vulnerabilities in the django-registration package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • L
    Information Exposure

    Affected versions of this package are vulnerable to Information Exposure django-registration did not apply Django's :func:django.views.decorators.debug.sensitive_post_parametersdecorator to the basedjango_registration.views.RegistrationView`.

    As such, if detailed error reports, such as `Django's error reports emailed to site staff were enabled, and a server-side error occurred during account registration, the generated error report would include all fields submitted in the HTTP request, some of which are potentially sensitive depending on the user-account model and registration workflow in use.

    How to fix Information Exposure?

    Upgrade django-registration to version 3.1.2 or higher.

    [,3.1.2)