Debian/python-django: medium 6.1
In Django 2.2 before 2.2.22, 3.1 before 3.1.10, and 3.2 before 3.2.2 (with Python 3.9.5+), URLValidator does not prohibit newlines and tabs (unless the URLField form field is used). If an application
Action: Upgrade python-django to 2:2.2.22-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2:2.2.22-1 | - |
Fixed versions
| 2:2.2.22-1 |
Sources
published · modified · JSON