PyPI/django-grappelli CVE-2021-46898: medium 6.1, EPSS 0.56%

Django Grappelli Open Redirect vulnerability

Action: Upgrade django-grappelli to 2.15.2 or later.

pip install django-grappelli==2.15.2

Affected

Fixed versions

Sources

• osv: GHSA-9x43-5qcq-h79q
• https://nvd.nist.gov/vuln/detail/CVE-2021-46898
• https://github.com/sehmaschine/django-grappelli/issues/975
• https://github.com/sehmaschine/django-grappelli/pull/976
• https://github.com/sehmaschine/django-grappelli/commit/4ca94bcda0fa2720594506853d85e00c8212968f
• https://github.com/pypa/advisory-database/tree/main/vulns/django-grappelli/PYSEC-2023-211.yaml
• https://github.com/sehmaschine/django-grappelli
• https://github.com/sehmaschine/django-grappelli/compare/2.15.1...2.15.2

CVE-2021-46898 · published 2023-10-22T21:36:10Z · modified 2024-09-13T20:24:36.552132Z · JSON