{"id":"CVE-2024-56374","aliases":["ALPINE-CVE-2024-56374","BIT-django-2024-56374","CLSA-2025-1754352704","CLSA-2026-1788169795","CLSA-2026-1788343087","CLSA-2026-1789454744","CLSA-2026-1789538082","CLSA-2026-1792393048","CLSA-2026-1793695934","CLSA-2026-1793869737","DEBIAN-CVE-2024-56374","DLA-4030-1","DSA-6136-1","EUVD-2025-0001","GHSA-qcgg-j2x8-h9g8","MGASA-2025-0039","OESA-2025-1069","PYSEC-2025-1","RHSA-2025:0777","RHSA-2025:2399","RHSA-2025:4576","SUSE-SU-2025:0149-1","UBUNTU-CVE-2024-56374","USN-7205-1","USN-7205-2","openSUSE-SU-2025:14651-1","openSUSE-SU-2025:14662-1","openSUSE-SU-2026:10005-1","openSUSE-SU-2026:11270-1"],"status":"published","title":"Django has a potential denial-of-service vulnerability in IPv6 validation","description":"An issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18. Lack of upper-bound limit enforcement in strings passed when performing IPv6 validation could lead to a potential denial-of-service attack. The undocumented and private functions clean_ipv6_address and is_valid_ipv6_address are vulnerable, as is the django.forms.GenericIPAddressField form field. (The django.db.models.GenericIPAddressField model field is not affected.)","severity":{"version":"3.1","score":5.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.01277,"percentile":0.702,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-770"],"published":"2025-01-14T00:00:00Z","modified":"2026-11-05T13:15:16Z","fixes":[{"ecosystem":"PyPI","package":"django","fixed_in":["5.1.5","5.0.11","4.2.18"],"sources":["ghsa","osv"]},{"ecosystem":"Alpine:v3.21","package":"py3-django","fixed_in":["4.2.20-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"py3-django","fixed_in":["4.2.20-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"py3-django","fixed_in":["4.2.20-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"py3-django","fixed_in":["4.2.20-r0"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"django","fixed_in":["5.1.5"],"sources":["osv"]},{"ecosystem":"TuxCare:PyPI","package":"django","fixed_in":["5.1.4.post1+tuxcare"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"python-django","fixed_in":["3:3.2.25-0+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"python-django","fixed_in":["3:4.2.18-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"python-django","fixed_in":["3:4.2.18-1"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"python-django","fixed_in":["2:2.2.28-1~deb11u5"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"python-django","fixed_in":["4.2.15-4.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"python-django","fixed_in":["4.2.15-4.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"python-django","fixed_in":["4.2.15-4.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"python-django","fixed_in":["4.2.15-4.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"python-django","fixed_in":["2.2.27-14.oe2003sp4"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"python-Django","fixed_in":["4.2.11-150600.3.15.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"python-Django","fixed_in":["4.2.11-150600.3.15.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"python-django","fixed_in":["1:1.11.11-1ubuntu1.21+esm9"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"python-django","fixed_in":["2:2.2.12-1ubuntu0.27"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"python-django","fixed_in":["2:3.2.12-2ubuntu1.16"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"python-django","fixed_in":["3:4.2.11-1ubuntu1.5"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"python-Django4","fixed_in":["4.2.18-1.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1"},{"fixed":"5.1.5"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0"},{"fixed":"5.0.11"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2"},{"fixed":"4.2.18"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"py3-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.20-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"py3-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.20-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"py3-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.20-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"py3-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.20-r0"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"django","ranges":[{"type":"SEMVER","events":[{"introduced":"4.2.0"},{"fixed":"5.1.5"}]}]},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.4"},{"fixed":"5.1.4.post1+tuxcare"}]}],"versions":["5.1.4"]},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.2"},{"fixed":"5.0.2.post6+tuxcare"}]}],"versions":["5.0.2","5.0.2.post1+tuxcare","5.0.2.post2+tuxcare","5.0.2.post3+tuxcare","5.0.2.post4+tuxcare","5.0.2.post5+tuxcare"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1"},{"fixed":"5.1.post6+tuxcare"}]}],"versions":["5.1","5.1.post1+tuxcare","5.1.post2+tuxcare","5.1.post3+tuxcare","5.1.post4+tuxcare","5.1.post5+tuxcare"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.1"},{"fixed":"5.0.1.post9+tuxcare"}]}],"versions":["5.0.1","5.0.1.post1+tuxcare","5.0.1.post2+tuxcare","5.0.1.post3+tuxcare","5.0.1.post4+tuxcare","5.0.1.post5+tuxcare","5.0.1.post6+tuxcare","5.0.1.post7+tuxcare","5.0.1.post8+tuxcare"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0"},{"fixed":"5.0.post13+tuxcare"}]}],"versions":["5.0","5.0.post1+tuxcare","5.0.post10+tuxcare","5.0.post11+tuxcare","5.0.post12+tuxcare","5.0.post2+tuxcare","5.0.post3+tuxcare","5.0.post4+tuxcare","5.0.post5+tuxcare","5.0.post6+tuxcare","5.0.post7+tuxcare","5.0.post8+tuxcare","5.0.post9+tuxcare"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2"},{"fixed":"4.2.post17+tuxcare"}]}],"versions":["4.2","4.2.post1+tuxcare","4.2.post10+tuxcare","4.2.post11+tuxcare","4.2.post12+tuxcare","4.2.post13+tuxcare","4.2.post14+tuxcare","4.2.post15+tuxcare","4.2.post16+tuxcare","4.2.post2+tuxcare","4.2.post3+tuxcare","4.2.post4+tuxcare","4.2.post5+tuxcare","4.2.post6+tuxcare","4.2.post7+tuxcare","4.2.post8+tuxcare","4.2.post9+tuxcare"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0"},{"fixed":"4.0.post27+tuxcare"}]}],"versions":["4.0","4.0.post1+tuxcare","4.0.post10+tuxcare","4.0.post11+tuxcare","4.0.post12+tuxcare","4.0.post13+tuxcare","4.0.post14+tuxcare","4.0.post15+tuxcare","4.0.post16+tuxcare","4.0.post17+tuxcare","4.0.post18+tuxcare","4.0.post19+tuxcare","4.0.post2+tuxcare","4.0.post20+tuxcare","4.0.post21+tuxcare","4.0.post22+tuxcare","4.0.post23+tuxcare","4.0.post24+tuxcare","4.0.post25+tuxcare","4.0.post26+tuxcare","4.0.post3+tuxcare","4.0.post4+tuxcare","4.0.post5+tuxcare","4.0.post6+tuxcare","4.0.post7+tuxcare","4.0.post8+tuxcare","4.0.post9+tuxcare"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.25"},{"fixed":"3.2.25.post16+tuxcare"}]}],"versions":["3.2.25","3.2.25.post1+tuxcare","3.2.25.post10+tuxcare","3.2.25.post11+tuxcare","3.2.25.post12+tuxcare","3.2.25.post13+tuxcare","3.2.25.post14+tuxcare","3.2.25.post15+tuxcare","3.2.25.post2+tuxcare","3.2.25.post3+tuxcare","3.2.25.post4+tuxcare","3.2.25.post5+tuxcare","3.2.25.post6+tuxcare","3.2.25.post7+tuxcare","3.2.25.post8+tuxcare","3.2.25.post9+tuxcare"],"bundled":6},{"source":"osv","ecosystem":"Debian:12","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:3.2.25-0+deb12u1"}]}],"versions":["3:3.2.19-1","3:3.2.19-1+deb12u1","3:3.2.19-1+deb12u1~bpo11+1","3:3.2.19-1+deb12u2","3:3.2.20-1","3:3.2.20-1.1","3:3.2.21-1"]},{"source":"osv","ecosystem":"Debian:13","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.2.18-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.2.18-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.28-1~deb11u5"}]}],"versions":["2:2.2.24-1","2:2.2.25-1~deb11u1","2:2.2.26-1~deb11u1","2:2.2.28-1~deb11u1","2:2.2.28-1~deb11u2","2:2.2.28-1~deb11u3","2:2.2.28-1~deb11u4"]},{"source":"osv","ecosystem":"Debian:12","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:3.2.25-0+deb12u1"}]}],"versions":["3:3.2.19-1","3:3.2.19-1+deb12u1","3:3.2.19-1+deb12u1~bpo11+1","3:3.2.19-1+deb12u2","3:3.2.20-1","3:3.2.20-1.1","3:3.2.21-1"],"bundled":23},{"source":"osv","ecosystem":"PyPI","package":"django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1"},{"fixed":"5.1.5"}]}],"versions":["5.1","5.1.1","5.1.2","5.1.3","5.1.4"]},{"source":"osv","ecosystem":"PyPI","package":"django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0"},{"fixed":"5.0.11"}]}],"versions":["5.0","5.0.1","5.0.10","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8","5.0.9"]},{"source":"osv","ecosystem":"PyPI","package":"django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2"},{"fixed":"4.2.18"}]}],"versions":["4.2","4.2.1","4.2.10","4.2.11","4.2.12","4.2.13","4.2.14","4.2.15","4.2.16","4.2.17","4.2.2","4.2.3","4.2.4","4.2.5","4.2.6","4.2.7","4.2.8","4.2.9"]},{"source":"osv","ecosystem":"PyPI","package":"django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1"},{"fixed":"5.1.5"}]}],"versions":["5.1","5.1.1","5.1.2","5.1.3","5.1.4"]},{"source":"osv","ecosystem":"PyPI","package":"django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0"},{"fixed":"5.0.11"}]}],"versions":["5.0","5.0.1","5.0.10","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8","5.0.9"]},{"source":"osv","ecosystem":"PyPI","package":"django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2"},{"fixed":"4.2.18"}]}],"versions":["4.2","4.2.1","4.2.10","4.2.11","4.2.12","4.2.13","4.2.14","4.2.15","4.2.16","4.2.17","4.2.2","4.2.3","4.2.4","4.2.5","4.2.6","4.2.7","4.2.8","4.2.9"]},{"source":"osv","ecosystem":"Mageia:9","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.13-1.2.mga9"}]}],"bundled":13},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.15-4.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.15-4.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.15-4.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.15-4.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.27-14.oe2003sp4"}]}]},{"source":"osv","ecosystem":"PyPI","package":"django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1"},{"fixed":"5.1.5"},{"introduced":"5.0"},{"fixed":"5.0.11"},{"introduced":"4.2"},{"fixed":"4.2.18"}]}],"versions":["4.2","4.2.1","4.2.10","4.2.11","4.2.12","4.2.13","4.2.14","4.2.15","4.2.16","4.2.17","4.2.2","4.2.3","4.2.4","4.2.5","4.2.6","4.2.7","4.2.8","4.2.9","5.0","5.0.1","5.0.10","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8","5.0.9","5.1","5.1.1","5.1.2","5.1.3","5.1.4"]},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_developer:2.5::el8","package":"python3.11-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.18-1.el8ap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el8","package":"python3.11-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.18-1.el8ap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_developer:2.5::el9","package":"python3.11-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.18-1.el9ap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el9","package":"python3.11-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.18-1.el9ap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_developer:2.5::el8","package":"python3.11-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.5-1.el8ap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_inside:2.5::el8","package":"python3.11-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.5-1.el8ap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el8","package":"automation-controller-venv-tower","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.7-1.el8ap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el8","package":"python3.11-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.5-1.el8ap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_developer:2.5::el9","package":"python3.11-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.5-1.el9ap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_inside:2.5::el9","package":"python3.11-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.5-1.el9ap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el9","package":"automation-controller-venv-tower","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.7-1.el9ap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el9","package":"python3.11-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.5-1.el9ap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.6-1.el8sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"foreman-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.6-1.el8sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"foreman-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.12.0.4-2.el8sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"foreman-installer-katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.12.0.4-2.el8sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"foreman-pcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.6-1.el8sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.19-1.el8pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"python-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.5-1.el8pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"python-pulp-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.29.2-2.el8pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"python-pulp-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.20.5-1.el8pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"python-pulp-glue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.29.2-2.el8pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"python-pulpcore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.49.33-1.el8pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"python-requests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.32.3-2.el8pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"python3.11-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.19-1.el8pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"python3.11-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.5-1.el8pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"python3.11-pulp-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.29.2-2.el8pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"python3.11-pulp-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.20.5-1.el8pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"python3.11-pulp-glue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.29.2-2.el8pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"python3.11-pulpcore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.49.33-1.el8pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"python3.11-requests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.32.3-2.el8pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"rubygem-foreman_maintain","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.12-1.el8sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.16.3-2.el8sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"satellite-capsule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.16.3-2.el8sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"satellite-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.16.3-2.el8sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_maintenance:6.16::el8","package":"rubygem-foreman_maintain","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.12-1.el8sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.16::el8","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.6-1.el8sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.16::el8","package":"foreman-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.6-1.el8sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.16::el8","package":"satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.16.3-2.el8sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.16::el8","package":"satellite-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.16.3-2.el8sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"candlepin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.21-1.el8sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"candlepin-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.21-1.el8sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.6-1.el8sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"foreman-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.6-1.el8sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"foreman-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.6-1.el8sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"foreman-dynflow-sidekiq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.6-1.el8sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"foreman-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.6-1.el8sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"foreman-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.12.0.4-2.el8sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"foreman-installer-katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.12.0.4-2.el8sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"foreman-journald","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.6-1.el8sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"foreman-libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.6-1.el8sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"foreman-openstack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.6-1.el8sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"foreman-ovirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.6-1.el8sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"foreman-pcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.6-1.el8sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"foreman-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.6-1.el8sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"foreman-redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.6-1.el8sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"foreman-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.6-1.el8sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"foreman-telemetry","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.6-1.el8sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"foreman-vmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.6-1.el8sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.19-1.el8pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"python-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.5-1.el8pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"python-pulp-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.29.2-2.el8pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"python-pulp-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.20.5-1.el8pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"python-pulp-glue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.29.2-2.el8pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"python-pulpcore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.49.33-1.el8pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"python-requests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.32.3-2.el8pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"python3.11-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.19-1.el8pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"python3.11-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.5-1.el8pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"python3.11-pulp-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.29.2-2.el8pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"python3.11-pulp-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.20.5-1.el8pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"python3.11-pulp-glue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.29.2-2.el8pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"python3.11-pulpcore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.49.33-1.el8pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"python3.11-requests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.32.3-2.el8pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"rubygem-foreman_ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:14.2.3-1.el8sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"rubygem-foreman_maintain","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.12-1.el8sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"rubygem-foreman_openscap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.5-1.el8sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"rubygem-foreman_remote_execution","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.2.7-1.el8sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"rubygem-foreman_remote_execution-cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.2.7-1.el8sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"rubygem-foreman_theme_satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.3.5-1.el8sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"rubygem-katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.0.8-1.el8sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.16.3-2.el8sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"satellite-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.16.3-2.el8sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"satellite-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.16.3-2.el8sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"scap-security-guide-satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-1.el8sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.6-1.el9sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"foreman-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.6-1.el9sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"foreman-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.12.0.4-2.el9sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"foreman-installer-katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.12.0.4-2.el9sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"foreman-pcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.6-1.el9sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.19-1.el9pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"python-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.5-1.el9pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"python-pulp-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.29.2-2.el9pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"python-pulp-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.20.5-1.el9pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"python-pulp-glue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.29.2-2.el9pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"python-pulpcore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.49.33-1.el9pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"python-requests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.32.3-2.el9pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"python3.11-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.19-1.el9pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"python3.11-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.5-1.el9pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"python3.11-pulp-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.29.2-2.el9pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"python3.11-pulp-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.20.5-1.el9pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"python3.11-pulp-glue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.29.2-2.el9pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"python3.11-pulpcore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.49.33-1.el9pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"python3.11-requests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.32.3-2.el9pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"rubygem-foreman_maintain","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.12-1.el9sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.16.3-2.el9sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"satellite-capsule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.16.3-2.el9sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"satellite-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.16.3-2.el9sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_maintenance:6.16::el9","package":"rubygem-foreman_maintain","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.12-1.el9sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.16::el9","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.6-1.el9sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.16::el9","package":"foreman-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.6-1.el9sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.16::el9","package":"satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.16.3-2.el9sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.16::el9","package":"satellite-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.16.3-2.el9sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"candlepin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.21-1.el9sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"candlepin-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.21-1.el9sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.6-1.el9sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"foreman-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.6-1.el9sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"foreman-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.6-1.el9sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"foreman-dynflow-sidekiq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.6-1.el9sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"foreman-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.6-1.el9sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"foreman-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.12.0.4-2.el9sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"foreman-installer-katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.12.0.4-2.el9sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"foreman-journald","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.6-1.el9sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"foreman-libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.6-1.el9sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"foreman-openstack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.6-1.el9sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"foreman-ovirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.6-1.el9sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"foreman-pcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.6-1.el9sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"foreman-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.6-1.el9sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"foreman-redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.6-1.el9sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"foreman-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.6-1.el9sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"foreman-telemetry","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.6-1.el9sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"foreman-vmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.6-1.el9sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.19-1.el9pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"python-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.5-1.el9pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"python-pulp-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.29.2-2.el9pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"python-pulp-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.20.5-1.el9pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"python-pulp-glue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.29.2-2.el9pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"python-pulpcore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.49.33-1.el9pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"python-requests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.32.3-2.el9pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"python3.11-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.19-1.el9pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"python3.11-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.5-1.el9pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"python3.11-pulp-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.29.2-2.el9pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"python3.11-pulp-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.20.5-1.el9pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"python3.11-pulp-glue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.29.2-2.el9pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"python3.11-pulpcore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.49.33-1.el9pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"python3.11-requests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.32.3-2.el9pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"rubygem-foreman_ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:14.2.3-1.el9sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"rubygem-foreman_maintain","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.12-1.el9sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"rubygem-foreman_openscap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.5-1.el9sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"rubygem-foreman_remote_execution","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.2.7-1.el9sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"rubygem-foreman_remote_execution-cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.2.7-1.el9sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"rubygem-foreman_theme_satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.3.5-1.el9sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"rubygem-katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.0.8-1.el9sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.16.3-2.el9sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"satellite-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.16.3-2.el9sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"satellite-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.16.3-2.el9sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"scap-security-guide-satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-1.el9sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.17::el9","package":"python-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.5-1.el9pc"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.17::el9","package":"python3.11-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.5-1.el9pc"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"python-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.5-1.el9pc"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"python3.11-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.5-1.el9pc"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.17::el9","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.19-1.el9pc"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.17::el9","package":"python3.11-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.19-1.el9pc"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.19-1.el9pc"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"python3.11-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.19-1.el9pc"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"rubygem-graphql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.24-1.el9sat"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.17::el9","package":"rubygem-rack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-1.el9sat"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"rubygem-rack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-1.el9sat"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"python-Django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.11-150600.3.15.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python-Django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.11-150600.3.15.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.5.4-1ubuntu1","1.6-1","1.6.1-1","1.6.1-2","1.6.1-2ubuntu0.1","1.6.1-2ubuntu0.2","1.6.1-2ubuntu0.3","1.6.1-2ubuntu0.4","1.6.1-2ubuntu0.5","1.6.1-2ubuntu0.6","1.6.1-2ubuntu0.8","1.6.1-2ubuntu0.9","1.6.1-2ubuntu0.10","1.6.1-2ubuntu0.11","1.6.1-2ubuntu0.12","1.6.1-2ubuntu0.13","1.6.1-2ubuntu0.14","1.6.1-2ubuntu0.15","1.6.1-2ubuntu0.16","1.6.11-0ubuntu1","1.6.11-0ubuntu1.1","1.6.11-0ubuntu1.2","1.6.11-0ubuntu1.3","1.6.11-0ubuntu1.3+esm1","1.6.11-0ubuntu1.3+esm2","1.6.11-0ubuntu1.3+esm3","1.6.11-0ubuntu1.3+esm4","1.6.11-0ubuntu1.3+esm5","1.6.11-0ubuntu1.3+esm6","1.6.11-0ubuntu1.3+esm7","1.6.11-0ubuntu1.3+esm8","1.6.11-0ubuntu1.3+esm9","1.6.11-0ubuntu1.3+esm10","1.6.11-0ubuntu1.3+esm11","1.6.11-0ubuntu1.3+esm12"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.7.9-1ubuntu5","1.8.5-2ubuntu1","1.8.7-1ubuntu1","1.8.7-1ubuntu2","1.8.7-1ubuntu3","1.8.7-1ubuntu4","1.8.7-1ubuntu5","1.8.7-1ubuntu5.1","1.8.7-1ubuntu5.2","1.8.7-1ubuntu5.4","1.8.7-1ubuntu5.5","1.8.7-1ubuntu5.6","1.8.7-1ubuntu5.7","1.8.7-1ubuntu5.8","1.8.7-1ubuntu5.9","1.8.7-1ubuntu5.10","1.8.7-1ubuntu5.11","1.8.7-1ubuntu5.12","1.8.7-1ubuntu5.13","1.8.7-1ubuntu5.14","1.8.7-1ubuntu5.15","1.8.7-1ubuntu5.15+esm1","1.8.7-1ubuntu5.15+esm3","1.8.7-1ubuntu5.15+esm4","1.8.7-1ubuntu5.15+esm5","1.8.7-1ubuntu5.15+esm6","1.8.7-1ubuntu5.15+esm7","1.8.7-1ubuntu5.15+esm8","1.8.7-1ubuntu5.15+esm9","1.8.7-1ubuntu5.15+esm10","1.8.7-1ubuntu5.15+esm11","1.8.7-1ubuntu5.15+esm12","1.8.7-1ubuntu5.15+esm13"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.11.11-1ubuntu1.21+esm9"}]}],"versions":["1:1.11.4-1ubuntu1","1:1.11.6-1ubuntu1","1:1.11.9-1ubuntu1","1:1.11.11-1ubuntu1","1:1.11.11-1ubuntu1.1","1:1.11.11-1ubuntu1.2","1:1.11.11-1ubuntu1.3","1:1.11.11-1ubuntu1.4","1:1.11.11-1ubuntu1.5","1:1.11.11-1ubuntu1.6","1:1.11.11-1ubuntu1.7","1:1.11.11-1ubuntu1.8","1:1.11.11-1ubuntu1.9","1:1.11.11-1ubuntu1.10","1:1.11.11-1ubuntu1.11","1:1.11.11-1ubuntu1.12","1:1.11.11-1ubuntu1.13","1:1.11.11-1ubuntu1.14","1:1.11.11-1ubuntu1.15","1:1.11.11-1ubuntu1.16","1:1.11.11-1ubuntu1.17","1:1.11.11-1ubuntu1.18","1:1.11.11-1ubuntu1.19","1:1.11.11-1ubuntu1.20","1:1.11.11-1ubuntu1.21","1:1.11.11-1ubuntu1.21+esm1","1:1.11.11-1ubuntu1.21+esm2","1:1.11.11-1ubuntu1.21+esm3","1:1.11.11-1ubuntu1.21+esm4","1:1.11.11-1ubuntu1.21+esm5","1:1.11.11-1ubuntu1.21+esm6","1:1.11.11-1ubuntu1.21+esm7","1:1.11.11-1ubuntu1.21+esm8"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.12-1ubuntu0.27"}]}],"versions":["1:1.11.22-1ubuntu1","2:2.2.6-1ubuntu1","2:2.2.9-2ubuntu1","2:2.2.10-1","2:2.2.10-1ubuntu1","2:2.2.11-1","2:2.2.12-1","2:2.2.12-1ubuntu0.1","2:2.2.12-1ubuntu0.2","2:2.2.12-1ubuntu0.3","2:2.2.12-1ubuntu0.4","2:2.2.12-1ubuntu0.5","2:2.2.12-1ubuntu0.6","2:2.2.12-1ubuntu0.7","2:2.2.12-1ubuntu0.8","2:2.2.12-1ubuntu0.9","2:2.2.12-1ubuntu0.10","2:2.2.12-1ubuntu0.11","2:2.2.12-1ubuntu0.12","2:2.2.12-1ubuntu0.13","2:2.2.12-1ubuntu0.14","2:2.2.12-1ubuntu0.15","2:2.2.12-1ubuntu0.16","2:2.2.12-1ubuntu0.17","2:2.2.12-1ubuntu0.18","2:2.2.12-1ubuntu0.19","2:2.2.12-1ubuntu0.20","2:2.2.12-1ubuntu0.21","2:2.2.12-1ubuntu0.22","2:2.2.12-1ubuntu0.23","2:2.2.12-1ubuntu0.24","2:2.2.12-1ubuntu0.25","2:2.2.12-1ubuntu0.26"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.2.12-2ubuntu1.16"}]}],"versions":["2:2.2.24-1ubuntu1","2:3.2.12-2","2:3.2.12-2ubuntu1","2:3.2.12-2ubuntu1.1","2:3.2.12-2ubuntu1.2","2:3.2.12-2ubuntu1.3","2:3.2.12-2ubuntu1.4","2:3.2.12-2ubuntu1.5","2:3.2.12-2ubuntu1.6","2:3.2.12-2ubuntu1.7","2:3.2.12-2ubuntu1.8","2:3.2.12-2ubuntu1.9","2:3.2.12-2ubuntu1.10","2:3.2.12-2ubuntu1.11","2:3.2.12-2ubuntu1.12","2:3.2.12-2ubuntu1.13","2:3.2.12-2ubuntu1.14","2:3.2.12-2ubuntu1.15"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.2.11-1ubuntu1.5"}]}],"versions":["3:4.2.4-1ubuntu2","3:4.2.8-1","3:4.2.9-1","3:4.2.11-1","3:4.2.11-1ubuntu1","3:4.2.11-1ubuntu1.1","3:4.2.11-1ubuntu1.2","3:4.2.11-1ubuntu1.3","3:4.2.11-1ubuntu1.4"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.12-1ubuntu0.27"}]}],"versions":["1:1.11.22-1ubuntu1","2:2.2.6-1ubuntu1","2:2.2.9-2ubuntu1","2:2.2.10-1","2:2.2.10-1ubuntu1","2:2.2.11-1","2:2.2.12-1","2:2.2.12-1ubuntu0.1","2:2.2.12-1ubuntu0.2","2:2.2.12-1ubuntu0.3","2:2.2.12-1ubuntu0.4","2:2.2.12-1ubuntu0.5","2:2.2.12-1ubuntu0.6","2:2.2.12-1ubuntu0.7","2:2.2.12-1ubuntu0.8","2:2.2.12-1ubuntu0.9","2:2.2.12-1ubuntu0.10","2:2.2.12-1ubuntu0.11","2:2.2.12-1ubuntu0.12","2:2.2.12-1ubuntu0.13","2:2.2.12-1ubuntu0.14","2:2.2.12-1ubuntu0.15","2:2.2.12-1ubuntu0.16","2:2.2.12-1ubuntu0.17","2:2.2.12-1ubuntu0.18","2:2.2.12-1ubuntu0.19","2:2.2.12-1ubuntu0.20","2:2.2.12-1ubuntu0.21","2:2.2.12-1ubuntu0.22","2:2.2.12-1ubuntu0.23","2:2.2.12-1ubuntu0.24","2:2.2.12-1ubuntu0.25","2:2.2.12-1ubuntu0.26"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.2.12-2ubuntu1.16"}]}],"versions":["2:2.2.24-1ubuntu1","2:3.2.12-2","2:3.2.12-2ubuntu1","2:3.2.12-2ubuntu1.1","2:3.2.12-2ubuntu1.2","2:3.2.12-2ubuntu1.3","2:3.2.12-2ubuntu1.4","2:3.2.12-2ubuntu1.5","2:3.2.12-2ubuntu1.6","2:3.2.12-2ubuntu1.7","2:3.2.12-2ubuntu1.8","2:3.2.12-2ubuntu1.9","2:3.2.12-2ubuntu1.10","2:3.2.12-2ubuntu1.11","2:3.2.12-2ubuntu1.12","2:3.2.12-2ubuntu1.13","2:3.2.12-2ubuntu1.14","2:3.2.12-2ubuntu1.15"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.2.11-1ubuntu1.5"}]}],"versions":["3:4.2.4-1ubuntu2","3:4.2.8-1","3:4.2.9-1","3:4.2.11-1","3:4.2.11-1ubuntu1","3:4.2.11-1ubuntu1.1","3:4.2.11-1ubuntu1.2","3:4.2.11-1ubuntu1.3","3:4.2.11-1ubuntu1.4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.11.11-1ubuntu1.21+esm9"}]}],"versions":["1:1.11.4-1ubuntu1","1:1.11.6-1ubuntu1","1:1.11.9-1ubuntu1","1:1.11.11-1ubuntu1","1:1.11.11-1ubuntu1.1","1:1.11.11-1ubuntu1.2","1:1.11.11-1ubuntu1.3","1:1.11.11-1ubuntu1.4","1:1.11.11-1ubuntu1.5","1:1.11.11-1ubuntu1.6","1:1.11.11-1ubuntu1.7","1:1.11.11-1ubuntu1.8","1:1.11.11-1ubuntu1.9","1:1.11.11-1ubuntu1.10","1:1.11.11-1ubuntu1.11","1:1.11.11-1ubuntu1.12","1:1.11.11-1ubuntu1.13","1:1.11.11-1ubuntu1.14","1:1.11.11-1ubuntu1.15","1:1.11.11-1ubuntu1.16","1:1.11.11-1ubuntu1.17","1:1.11.11-1ubuntu1.18","1:1.11.11-1ubuntu1.19","1:1.11.11-1ubuntu1.20","1:1.11.11-1ubuntu1.21","1:1.11.11-1ubuntu1.21+esm1","1:1.11.11-1ubuntu1.21+esm2","1:1.11.11-1ubuntu1.21+esm3","1:1.11.11-1ubuntu1.21+esm4","1:1.11.11-1ubuntu1.21+esm5","1:1.11.11-1ubuntu1.21+esm6","1:1.11.11-1ubuntu1.21+esm7","1:1.11.11-1ubuntu1.21+esm8"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-Django4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.18-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-Django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.5-1.1"}]}],"bundled":12},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-Django6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-1.1"}]}],"bundled":70},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-Django5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.16-1.1"}]}],"bundled":93}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"djangoproject","product":"django"}],"references":[{"url":"https://docs.djangoproject.com/en/dev/releases/security/","tags":["Vendor Advisory","advisory","web","article"]},{"url":"https://groups.google.com/g/django-announce","tags":["Vendor Advisory","advisory","web","article"]},{"url":"https://www.djangoproject.com/weblog/2025/jan/14/security-releases/","tags":["Vendor Advisory","advisory","article"]},{"url":"http://www.openwall.com/lists/oss-security/2025/01/14/2","tags":["Mailing List","Third Party Advisory","advisory","web","article"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/01/msg00024.html","tags":["Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-56374","tags":["web","advisory"]},{"url":"https://docs.djangoproject.com/en/dev/releases/security","tags":["web"]},{"url":"https://www.djangoproject.com/weblog/2025/jan/14/security-releases","tags":["web"]},{"url":"https://github.com/django/django/commit/ca2be7724e1244a4cb723de40a070f873c6e94bf","tags":["web"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2025-1.yaml","tags":["web"]},{"url":"https://github.com/django/django/commit/4806731e58f3e8700a3c802e77899d54ac6021fe","tags":["web"]},{"url":"https://github.com/django/django/commit/ad866a1ca3e7d60da888d25d27e46a8adb2ed36e","tags":["web"]},{"url":"https://github.com/django/django/commit/e8d4a2005955dcf962193600b53bf461b190b455","tags":["web"]},{"url":"https://github.com/advisories/GHSA-qcgg-j2x8-h9g8","tags":["advisory"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2024-56374","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/56xxx/CVE-2024-56374.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-56374","tags":["advisory"]},{"url":"https://github.com/django/django","tags":["package"]},{"url":"https://advisories.mageia.org/MGASA-2025-0039.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33919","tags":["report"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33387","tags":["report"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33507","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2024/07/09/3","tags":["web"]},{"url":"https://www.djangoproject.com/weblog/2024/jul/09/security-releases/","tags":["web"]},{"url":"https://openwall.com/lists/oss-security/2024/08/06/2","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2024/09/03/3","tags":["web"]},{"url":"https://openwall.com/lists/oss-security/2024/12/04/3","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2025/01/14/2","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-7205-1","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1069","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:0777","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2329288","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2333854","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2333856","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2337996","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0777.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-53907","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-53907","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-53907","tags":["advisory"]},{"url":"https://www.djangoproject.com/weblog/2024/dec/04/security-releases/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-56201","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-56201","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-56201","tags":["advisory"]},{"url":"https://github.com/pallets/jinja/commit/767b23617628419ae3709ccfb02f9602ae9fe51f","tags":["article"]},{"url":"https://github.com/pallets/jinja/issues/1792","tags":["article"]},{"url":"https://github.com/pallets/jinja/releases/tag/3.1.5","tags":["article"]},{"url":"https://github.com/pallets/jinja/security/advisories/GHSA-gmj6-6f8f-6699","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-56326","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-56326","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-56326","tags":["advisory"]},{"url":"https://github.com/pallets/jinja/commit/48b0687e05a5466a91cd5812d604fa37ad0943b4","tags":["article"]},{"url":"https://github.com/pallets/jinja/security/advisories/GHSA-q2x7-8rv6-6q7h","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-56374","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-56374","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2025:2399","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_satellite/6.16/html/updating_red_hat_satellite/index","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30027","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30099","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30256","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30283","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30293","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30294","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30918","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30934","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30936","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30937","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30938","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30939","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30940","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30941","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30942","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30954","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30955","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_2399.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-35195","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2282114","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-35195","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-35195","tags":["advisory"]},{"url":"https://github.com/psf/requests/security/advisories/GHSA-9wx4-h78v-vm56","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2025:4576","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/SAT-12130","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-16243","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-16248","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-16392","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-17448","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-17783","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-19325","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-19336","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-19505","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-19515","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-19781","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-19933","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-20010","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-20579","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-20586","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-20673","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-20889","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-21359","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-22510","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-22966","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-22981","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-23035","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-23114","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-23229","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-2340","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-23647","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-24108","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-24282","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-24725","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-24795","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-25448","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-25464","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-2549","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-25949","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-26058","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-26076","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-26522","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-26537","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-26605","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-26741","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-26866","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27070","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27153","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27221","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27308","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27349","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27369","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27374","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27385","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27388","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27418","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27420","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27427","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27476","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27541","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27554","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27620","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27627","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27675","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27703","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27717","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27756","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27847","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27863","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27874","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27875","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27924","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27939","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27979","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28029","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28060","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28185","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28216","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28293","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28311","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28312","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28337","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28338","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28356","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28443","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28464","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28471","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28472","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28486","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28493","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28526","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28538","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28552","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28553","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28556","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28575","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28613","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28662","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28735","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28743","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28756","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28818","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28823","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28826","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28832","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28856","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28860","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28894","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28981","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28994","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29017","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29058","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29062","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29068","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29070","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29090","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29203","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29209","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29212","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29214","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29314","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29322","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29332","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29345","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29347","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29454","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29469","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29567","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29596","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29622","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29623","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29667","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29670","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29675","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29679","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29715","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29794","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29863","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29939","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29945","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29950","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29957","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30004","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30014","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30043","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30070","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30098","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30102","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30106","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30108","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30112","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30118","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30138","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30141","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30152","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30154","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30167","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30172","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30176","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30186","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30188","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30209","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30220","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30227","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30228","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30314","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30342","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30374","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30378","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30403","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30443","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30464","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30491","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30541","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30543","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30544","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30577","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30611","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30614","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30625","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30636","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30637","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30669","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30686","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30715","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30717","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30726","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30761","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30767","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30785","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30790","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30815","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30841","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30846","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30869","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30916","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30961","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30962","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30967","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30970","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31040","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31105","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31111","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31157","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31160","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31193","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31196","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31203","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31220","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31241","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31308","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31315","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31316","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31338","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31351","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31398","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31451","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31475","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31479","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31502","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31526","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31588","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31602","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31645","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31813","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31814","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-32426","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-32447","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-32467","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-32604","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-32605","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-5118","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-6776","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4576.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-27407","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2351767","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-27407","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27407","tags":["advisory"]},{"url":"https://github.com/github-community-projects/graphql-client","tags":["article"]},{"url":"https://github.com/rmosolgo/graphql-ruby/commit/28233b16c0eb9d0fb7808f4980e061dc7507c4cd","tags":["article"]},{"url":"https://github.com/rmosolgo/graphql-ruby/commit/2d2f4ed1f79472f8eed29c864b039649e1de238f","tags":["article"]},{"url":"https://github.com/rmosolgo/graphql-ruby/commit/5c5a7b9a9bdce143be048074aea50edb7bb747be","tags":["article"]},{"url":"https://github.com/rmosolgo/graphql-ruby/commit/6eca16b9fa553aa957099a30dbde64ddcdac52ca","tags":["article"]},{"url":"https://github.com/rmosolgo/graphql-ruby/commit/d0963289e0dab4ea893bbecf12bb7d89294957bb","tags":["article"]},{"url":"https://github.com/rmosolgo/graphql-ruby/commit/d1117ae0361d9ed67e0795b07f5c3e98e62f3c7c","tags":["article"]},{"url":"https://github.com/rmosolgo/graphql-ruby/commit/e3b33ace05391da2871c75ab4d3b66e29133b367","tags":["article"]},{"url":"https://github.com/rmosolgo/graphql-ruby/security/advisories/GHSA-q92j-grw3-h492","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-27610","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2351231","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-27610","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27610","tags":["advisory"]},{"url":"https://github.com/rack/rack/commit/50caab74fa01ee8f5dbdee7bb2782126d20c6583","tags":["article"]},{"url":"https://github.com/rack/rack/security/advisories/GHSA-7wqh-767x-r66v","tags":["article"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250149-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1235856","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-56374","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2024-56374","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7205-2","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2021-45115","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-45452","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22818","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-23833","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-28346","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-28347","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-34265","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-36359","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-41323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-23969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-24580","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3982","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5145","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5963","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7233","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7234","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16984","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-6188","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7536","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7537","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12308","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14232","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19118","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19844","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3498","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-6975","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13254","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13596","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-24583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-24584","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7471","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-9402","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-31542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-32052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-33203","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-33571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-35042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-31047","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-36053","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-41164","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-43665","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-24680","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-27351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-38875","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-39329","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-39330","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-39614","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41989","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41990","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41991","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42005","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45230","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45231","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-53907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-53908","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13372","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-26699","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-27556","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32873","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-48432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-57833","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59681","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59682","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64460","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14550","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-1207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-1285","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-1287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-1312","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25674","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33033","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33034","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35192","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35193","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4277","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4292","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48587","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48588","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53877","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53878","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6873","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7666","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8404","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2024-56374","description":"An issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18. Lack of upper-bound limit enforcement in strings passed when performing IPv6 validation could lead to a potential denial-of-service attack. The undocumented and private functions clean_ipv6_address and is_valid_ipv6_address are vulnerable, as is the django.forms.GenericIPAddressField form field. (The django.db.models.GenericIPAddressField model field is not affected.)","status":"published","published":"2025-01-14T00:00:00Z","modified":"2025-02-12T20:31:20.698Z","cvss":[{"version":"3.1","score":5.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:33:57.983942Z"}],"euvd":[{"id":"EUVD-2025-0001","description":"An issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18. Lack of upper-bound limit enforcement in strings passed when performing IPv6 validation could lead to a potential denial-of-service attack. The undocumented and private functions clean_ipv6_address and is_valid_ipv6_address are vulnerable, as is the django.forms.GenericIPAddressField form field. (The django.db.models.GenericIPAddressField model field is not affected.)","status":"published","published":"2025-01-14T00:00:00Z","modified":"2025-02-12T20:31:20Z","cvss":[{"version":"3.1","score":5.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-03T00:03:56.514594Z"}],"ghsa":[{"id":"GHSA-qcgg-j2x8-h9g8","title":"Django has a potential denial-of-service vulnerability in IPv6 validation","description":"An issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18. Lack of upper-bound limit enforcement in strings passed when performing IPv6 validation could lead to a potential denial-of-service attack. The undocumented and private functions `clean_ipv6_address` and `is_valid_ipv6_address` are vulnerable, as is the `django.forms.GenericIPAddressField` form field. (The django.db.models.GenericIPAddressField model field is not affected.)","status":"published","published":"2025-01-14T21:31:47Z","modified":"2025-05-20T18:06:45Z","cvss":[{"version":"3.1","score":5.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:38:43.998596Z"}],"nvd":[{"id":"CVE-2024-56374","description":"An issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18. Lack of upper-bound limit enforcement in strings passed when performing IPv6 validation could lead to a potential denial-of-service attack. The undocumented and private functions clean_ipv6_address and is_valid_ipv6_address are vulnerable, as is the django.forms.GenericIPAddressField form field. (The django.db.models.GenericIPAddressField model field is not affected.)","status":"published","published":"2025-01-14T19:15:32.51Z","modified":"2026-06-17T08:12:08.04Z","cvss":[{"version":"3.1","score":5.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:10:42.329342Z"}],"osv":[{"id":"ALPINE-CVE-2024-56374","description":"An issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18. Lack of upper-bound limit enforcement in strings passed when performing IPv6 validation could lead to a potential denial-of-service attack. The undocumented and private functions clean_ipv6_address and is_valid_ipv6_address are vulnerable, as is the django.forms.GenericIPAddressField form field. (The django.db.models.GenericIPAddressField model field is not affected.)","status":"published","published":"2025-01-14T19:15:32.51Z","modified":"2026-11-03T06:32:11.401232981Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T07:18:15.355745Z"},{"id":"CVE-2024-56374","description":"An issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18. Lack of upper-bound limit enforcement in strings passed when performing IPv6 validation could lead to a potential denial-of-service attack. The undocumented and private functions clean_ipv6_address and is_valid_ipv6_address are vulnerable, as is the django.forms.GenericIPAddressField form field. (The django.db.models.GenericIPAddressField model field is not affected.)","status":"published","published":"2025-01-14T00:00:00Z","modified":"2026-10-28T02:30:24.742267687Z","cvss":[{"version":"3.1","score":5.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T15:44:44.777182Z"},{"id":"DEBIAN-CVE-2024-56374","description":"An issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18. Lack of upper-bound limit enforcement in strings passed when performing IPv6 validation could lead to a potential denial-of-service attack. The undocumented and private functions clean_ipv6_address and is_valid_ipv6_address are vulnerable, as is the django.forms.GenericIPAddressField form field. (The django.db.models.GenericIPAddressField model field is not affected.)","status":"published","published":"2025-01-14T19:15:32.51Z","modified":"2026-11-02T12:03:15.067020132Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:44.429177Z"},{"id":"GHSA-qcgg-j2x8-h9g8","title":"Django has a potential denial-of-service vulnerability in IPv6 validation","description":"An issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18. Lack of upper-bound limit enforcement in strings passed when performing IPv6 validation could lead to a potential denial-of-service attack. The undocumented and private functions `clean_ipv6_address` and `is_valid_ipv6_address` are vulnerable, as is the `django.forms.GenericIPAddressField` form field. (The django.db.models.GenericIPAddressField model field is not affected.)","status":"published","published":"2025-01-14T21:31:47Z","modified":"2026-09-10T03:50:22.125731749Z","cvss":[{"version":"3.1","score":5.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T15:46:54.40888Z"},{"id":"OESA-2025-1069","title":"python-django security update","description":"A high-level Python Web framework that encourages rapid development and clean, pragmatic design.\r\n\r\nSecurity Fix(es):\n\nAn issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18. Lack of upper-bound limit enforcement in strings passed when performing IPv6 validation could lead to a potential denial-of-service attack. The undocumented and private functions clean_ipv6_address and is_valid_ipv6_address are vulnerable, as is the django.forms.GenericIPAddressField form field. (The django.db.models.GenericIPAddressField model field is not affected.)(CVE-2024-56374)","status":"published","published":"2025-01-24T11:08:10Z","modified":"2026-08-18T01:18:44.701110467Z","cvss":[{"version":"3.1","score":5.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"RHSA-2025:0777","title":"Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update","status":"published","published":"2025-01-29T10:04:09Z","modified":"2026-10-16T10:06:08Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:2399","title":"Red Hat Security Advisory: Satellite 6.16.3 Async Update","status":"published","published":"2025-03-06T10:06:08Z","modified":"2026-10-16T10:08:24Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:4576","title":"Red Hat Security Advisory: Satellite 6.17.0 release","status":"published","published":"2025-05-07T10:05:50Z","modified":"2026-10-16T10:08:56Z","cvss":[{"version":"3.1","score":8.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"UBUNTU-CVE-2024-56374","description":"An issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18. Lack of upper-bound limit enforcement in strings passed when performing IPv6 validation could lead to a potential denial-of-service attack. The undocumented and private functions clean_ipv6_address and is_valid_ipv6_address are vulnerable, as is the django.forms.GenericIPAddressField form field. (The django.db.models.GenericIPAddressField model field is not affected.)","status":"published","published":"2025-01-14T14:00:00Z","modified":"2026-10-01T14:02:36.750512313Z","cvss":[{"version":"3.1","score":5.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L","level":"medium"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:55:15.331356Z"},{"id":"BIT-django-2024-56374","description":"An issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18. Lack of upper-bound limit enforcement in strings passed when performing IPv6 validation could lead to a potential denial-of-service attack. The undocumented and private functions clean_ipv6_address and is_valid_ipv6_address are vulnerable, as is the django.forms.GenericIPAddressField form field. (The django.db.models.GenericIPAddressField model field is not affected.)","status":"published","published":"2025-03-10T08:13:20.368Z","modified":"2026-09-08T08:46:36.48055827Z","updated_at":"2026-11-02T15:28:29.152062Z"},{"id":"CLSA-2025-1754352704","title":"TuxCare security update for django (1 CVE)","description":"TuxCare rebuilt django to address 1 CVE. Fixed in 5.1.4.post1+tuxcare.","status":"published","published":"2026-08-04T14:52:08Z","modified":"2026-10-15T09:48:04.86132002Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"CLSA-2026-1788169795","title":"TuxCare security update for django (11 CVEs)","description":"TuxCare rebuilt django to address 11 CVEs. Fixed in 5.0.2.post6+tuxcare.","status":"published","published":"2026-08-31T09:49:55Z","modified":"2026-10-15T09:48:05.691944483Z","updated_at":"2026-11-02T15:43:47.591214Z"},{"id":"CLSA-2026-1788343087","title":"TuxCare security update for django (2 CVEs)","description":"TuxCare rebuilt django to address 2 CVEs. Fixed in 5.1.post6+tuxcare.","status":"published","published":"2026-09-02T09:58:07Z","modified":"2026-10-15T09:48:01.30938398Z","updated_at":"2026-11-02T15:43:47.591214Z"},{"id":"CLSA-2026-1789454744","title":"TuxCare security update for django (5 CVEs)","description":"TuxCare rebuilt django to address 5 CVEs. Fixed in 5.0.1.post9+tuxcare.","status":"published","published":"2026-09-15T06:45:44Z","modified":"2026-10-15T09:48:01.703539522Z","updated_at":"2026-11-02T15:43:47.938828Z"},{"id":"CLSA-2026-1789538082","title":"TuxCare security update for django (4 CVEs)","description":"TuxCare rebuilt django to address 4 CVEs. Fixed in 5.0.post13+tuxcare.","status":"published","published":"2026-09-16T05:54:42Z","modified":"2026-10-15T09:48:01.981218607Z","updated_at":"2026-11-02T15:43:47.938828Z"},{"id":"CLSA-2026-1792393048","title":"TuxCare security update for django (20 CVEs)","description":"TuxCare rebuilt django to address 20 CVEs. Fixed in 4.2.post17+tuxcare.","status":"published","published":"2026-10-19T06:57:28Z","modified":"2026-10-19T13:30:08.114607458Z","updated_at":"2026-11-02T15:43:54.119956Z"},{"id":"CLSA-2026-1793695934","title":"TuxCare security update for django (6 CVEs)","description":"TuxCare rebuilt django to address 6 CVEs. Fixed in 4.0.post27+tuxcare.","status":"published","published":"2026-11-03T09:52:15Z","modified":"2026-11-03T13:30:03.157133717Z","updated_at":"2026-11-03T14:04:50.729288Z"},{"id":"CLSA-2026-1793869737","title":"TuxCare security update for django (6 CVEs)","description":"TuxCare rebuilt django to address 6 CVEs. Fixed in 3.2.25.post16+tuxcare.","status":"published","published":"2026-11-05T10:08:58Z","modified":"2026-11-05T13:15:16.276359196Z","updated_at":"2026-11-05T13:30:00.949926Z"},{"id":"DLA-4030-1","title":"python-django - security update","status":"published","published":"2025-01-23T00:00:00Z","modified":"2026-03-09T01:23:09.18103Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"DSA-6136-1","title":"python-django - security update","status":"published","published":"2026-02-15T00:00:00Z","modified":"2026-02-15T22:15:22.938868Z","updated_at":"2026-11-02T15:46:18.296714Z"},{"id":"MGASA-2025-0039","title":"Updated python-django packages fix security vulnerabilities","description":"An issue was discovered in Django 4.2 before 4.2.14 and 5.0 before\n5.0.7. urlize and urlizetrunc were subject to a potential denial of\nservice attack via certain inputs with a very large number of brackets.\n(CVE-2024-38875)\nAn issue was discovered in Django 5.0 before 5.0.7 and 4.2 before\n4.2.14. The django.contrib.auth.backends.ModelBackend.authenticate()\nmethod allows remote attackers to enumerate users via a timing attack\ninvolving login requests for users with an unusable password.\n(CVE-2024-39329)\nAn issue was discovered in Django 5.0 before 5.0.7 and 4.2 before\n4.2.14. Derived classes of the django.core.files.storage.Storage base\nclass, when they override generate_filename() without replicating the\nfile-path validations from the parent class, potentially allow directory\ntraversal via certain inputs during a save() call. (CVE-2024-39330)\nAn issue was discovered in Django 5.0 before 5.0.7 and 4.2 before\n4.2.14. get_supported_language_variant() was subject to a potential\ndenial-of-service attack when used with very long strings containing\nspecific characters. (CVE-2024-39614)\nAn issue was discovered in Django 5.0 before 5.0.8 and 4.2 before\n4.2.15. The floatformat template filter is subject to significant memory\nconsumption when given a string representation of a number in scientific\nnotation with a large exponent. (CVE-2024-41989)\nAn issue was discovered in Django 5.0 before 5.0.8 and 4.2 before\n4.2.15. The urlize() and urlizetrunc() template filters are subject to a\npotential denial-of-service attack via very large inputs with a specific\nsequence of characters. (CVE-2024-41990)\nAn issue was discovered in Django 5.0 before 5.0.8 and 4.2 before\n4.2.15. The urlize and urlizetrunc template filters, and the\nAdminURLFieldWidget widget, are subject to a potential denial-of-service\nattack via certain inputs with a very large number of Unicode\ncharacters. (CVE-2024-41991)\nAn issue was discovered in Django 5.0 before 5.0.8 and 4.2 before\n4.2.15. QuerySet.values() and values_list() methods on models with a\nJSONField are subject to SQL injection in column aliases via a crafted\nJSON object key as a passed *arg. (CVE-2024-42005)\nAn issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9,\nand 4.2 before 4.2.16. The urlize() and urlizetrunc() template filters\nare subject to a potential denial-of-service attack via very large\ninputs with a specific sequence of characters. (CVE-2024-45230)\nAn issue was discovered in Django v5.1.1, v5.0.9, and v4.2.16. The\ndjango.contrib.auth.forms.PasswordResetForm class, when used in a view\nimplementing password reset flows, allows remote attackers to enumerate\nuser e-mail addresses by sending password reset requests and observing\nthe outcome (only when e-mail sending is consistently failing).\n(CVE-2024-45231)\nAn issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10,\nand 4.2 before 4.2.17. The strip_tags() method and striptags template\nfilter are subject to a potential denial-of-service attack via certain\ninputs containing large sequences of nested incomplete HTML entities.\n(CVE-2024-53907)\nAn issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10,\nand 4.2 before 4.2.17. Direct usage of the\ndjango.db.models.fields.json.HasKey lookup, when an Oracle database is\nused, is subject to SQL injection if untrusted data is used as an lhs\nvalue. (CVE-2024-53908)\nAn issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11,\nand 4.2 before 4.2.18. Lack of upper-bound limit enforcement in strings\npassed when performing IPv6 validation could lead to a potential\ndenial-of-service attack. The undocumented and private functions\nclean_ipv6_address and is_valid_ipv6_address are vulnerable, as is the\ndjango.forms.GenericIPAddressField form field. (CVE-2024-56374)\n","status":"published","published":"2025-02-05T19:51:21Z","modified":"2026-04-16T04:44:08.897044559Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2025:14651-1","title":"python311-Django4-4.2.18-1.1 on GA media","description":"These are all security issues fixed in the python311-Django4-4.2.18-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-01-15T00:00:00Z","modified":"2026-02-04T02:13:44.951884Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"openSUSE-SU-2025:14662-1","title":"python311-Django-5.1.5-1.1 on GA media","description":"These are all security issues fixed in the python311-Django-5.1.5-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-01-17T00:00:00Z","modified":"2026-02-04T03:11:47.436285Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"openSUSE-SU-2026:10005-1","title":"python312-Django6-6.0-1.1 on GA media","description":"These are all security issues fixed in the python312-Django6-6.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-01-03T00:00:00Z","modified":"2026-03-23T04:54:19.792844Z","updated_at":"2026-11-02T16:58:38.101535Z"},{"id":"openSUSE-SU-2026:11270-1","title":"python313-Django5-5.2.16-1.1 on GA media","description":"These are all security issues fixed in the python313-Django5-5.2.16-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-07-14T00:00:00Z","modified":"2026-07-15T10:00:11.454078308Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"PYSEC-2025-1","description":"An issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18. Lack of upper-bound limit enforcement in strings passed when performing IPv6 validation could lead to a potential denial-of-service attack. The undocumented and private functions clean_ipv6_address and is_valid_ipv6_address are vulnerable, as is the django.forms.GenericIPAddressField form field. (The django.db.models.GenericIPAddressField model field is not affected.)","status":"published","published":"2025-01-14T19:15:32Z","modified":"2026-06-10T17:01:06.45698245Z","updated_at":"2026-11-02T15:52:54.242332Z"},{"id":"SUSE-SU-2025:0149-1","title":"Security update for python-Django","description":"This update for python-Django fixes the following issues:\n\n- CVE-2024-56374: Fixed lack of upper bound limit enforcement in strings when performing IPv6 validation that could lead to denial of service (bsc#1235856)\n","status":"published","published":"2025-01-16T17:03:39Z","modified":"2026-02-04T02:32:37.707218Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"USN-7205-1","title":"python-django vulnerability","description":"It was discovered that Django incorrectly handled certain IPv6\nstrings. An attacker could possibly use this issue to cause a\ndenial of service.\n","status":"published","published":"2025-01-14T16:10:23Z","modified":"2026-04-27T17:39:51.043726Z","updated_at":"2026-11-02T16:58:18.876384Z"},{"id":"USN-7205-2","title":"python-django vulnerability","description":"USN-7205-1 fixed a vulnerability in Django. This update provides\nthe corresponding update for Ubuntu 18.04 LTS.\n\nOriginal advisory details:\n\n It was discovered that Django incorrectly handled certain IPv6\n strings. An attacker could possibly use this issue to cause a\n denial of service.\n","status":"published","published":"2025-01-23T10:22:43Z","modified":"2026-04-27T17:40:35.916471Z","updated_at":"2026-11-02T16:58:18.876384Z"}]}}