PyPI/django-anymail CVE-2018-1000089: high 7.4

django-anymail Includes Sensitive Information in Log Files

Action: Upgrade django-anymail to 1.4 or later.

pip install django-anymail==1.4

Affected

Fixed versions

Sources

• osv: GHSA-qh9x-mc42-vg4g
• https://nvd.nist.gov/vuln/detail/CVE-2018-1000089
• https://github.com/anymail/django-anymail/commit/1a6086f2b58478d71f89bf27eb034ed81aefe5ef
• https://github.com/advisories/GHSA-qh9x-mc42-vg4g
• https://github.com/anymail/django-anymail
• https://github.com/anymail/django-anymail/releases/tag/v1.4
• https://github.com/pypa/advisory-database/tree/main/vulns/django-anymail/PYSEC-2018-46.yaml

CVE-2018-1000089 · published 2022-05-14T03:32:28Z · modified 2024-11-26T05:25:22.162736Z · JSON