PyPI/django CVE-2025-48432: medium 4, EPSS 0.75%

Django Improper Output Neutralization for Logs vulnerability

Action: Upgrade django to 4.2.22 or later.

pip install django==5.2.2

pip install django==5.1.10

pip install django==4.2.22

Affected

Fixed versions

Sources

• osv: GHSA-7xr5-9hcq-chf9
• https://nvd.nist.gov/vuln/detail/CVE-2025-48432
• https://docs.djangoproject.com/en/dev/releases/security
• https://github.com/django/django
• https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2025-47.yaml
• https://groups.google.com/g/django-announce
• https://www.djangoproject.com/weblog/2025/jun/04/security-releases
• https://www.djangoproject.com/weblog/2025/jun/10/bugfix-releases
• http://www.openwall.com/lists/oss-security/2025/06/04/5
• http://www.openwall.com/lists/oss-security/2025/06/10/2
• http://www.openwall.com/lists/oss-security/2025/06/10/3
• http://www.openwall.com/lists/oss-security/2025/06/10/4

CVE-2025-48432 · published 2025-06-05T03:30:58Z · modified 2026-09-10T03:50:25.160016024Z · JSON