tocsin

Debian/python-django-channels: high 7.4

Django Channels 3.x before 3.0.3 allows remote attackers to obtain sensitive information from a different request scope. The legacy channels.http.AsgiHandler class, used for handling HTTP type request

Action: Upgrade python-django-channels to 3.0.3-1 or later.

Affected

introducedfixedlast affected
03.0.3-1-

Fixed versions

3.0.3-1

Sources

published · modified · JSON