PyPI/django CVE-2019-6975: high 7.5, EPSS 5.06%

Uncontrolled Memory Consumption in Django

Action: Upgrade django to 1.11.19 or later.

pip install django==1.11.19

pip install django==2.0.11

pip install django==2.1.6

Affected

Fixed versions

Sources

• osv: GHSA-wh4h-v3f2-r2pp
• https://nvd.nist.gov/vuln/detail/CVE-2019-6975
• https://github.com/django/django/commit/0bbb560183fabf0533289700845dafa94951f227
• https://github.com/django/django/commit/1f42f82566c9d2d73aff1c42790d6b1b243f7676
• https://github.com/django/django/commit/40cd19055773705301c3428ed5e08a036d2091f3
• https://www.openwall.com/lists/oss-security/2019/02/11/1
• https://www.djangoproject.com/weblog/2019/feb/11/security-releases
• https://www.debian.org/security/2019/dsa-4476
• https://web.archive.org/web/20200227084713/http://www.securityfocus.com/bid/106964
• https://usn.ubuntu.com/3890-1
• https://seclists.org/bugtraq/2019/Jul/10
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HVXDOVCXLD74SHR2BENGCE2OOYYYWJHZ
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/66WMXHGBXD7GSM3PEXVCMCAGLMQYHZCU
• https://groups.google.com/forum/#!topic/django-announce/WTwEAprR0IQ
• https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2019-18.yaml
• https://github.com/django/django
• https://github.com/advisories/GHSA-wh4h-v3f2-r2pp
• https://docs.djangoproject.com/en/dev/releases/security

CVE-2019-6975 · published 2019-02-12T15:36:37Z · modified 2025-02-21T05:27:55.519642Z · JSON