Alpine/py3-django: medium 5.3
An issue was discovered in Django 5.2 before 5.2.3, 5.1 before 5.1.11, and 4.2 before 4.2.23. Internal HTTP response logging does not escape request.path, which allows remote attackers to potentially
Action: Upgrade py3-django to 4.2.22-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.2.22-r0 | - |
Fixed versions
| 4.2.22-r0 |
Sources
published · modified · JSON