tocsin

PyPI/django CVE-2019-3498: medium 6.5, EPSS 3.43%

In Django 1.11.x before 1.11.18, 2.0.x before 2.0.10, and 2.1.x before 2.1.5, an Improper Neutralization of Special Elements in Output Used by a Downstream Component issue exists in django.views.defau

Action: Upgrade django to 1.11.18 or later.

pip install django==1.11.18
pip install django==2.0.10
pip install django==2.1.5

Affected

introducedfixedlast affected
1.111.11.18-
2.02.0.10-
2.12.1.5-

Fixed versions

1.11.182.0.102.1.5

Sources

CVE-2019-3498 · published · modified · JSON