{"action":"Upgrade django to 1.4.14 or later.","affected":[{"fixed":"1.4.14","introduced":"0"},{"fixed":"1.5.9","introduced":"1.5"},{"fixed":"1.6.6","introduced":"1.6"}],"component":"django","cve_ids":["CVE-2014-0481"],"ecosystem":"PyPI","epss":0.0247,"exploited":false,"fixed_versions":["1.4.14","1.5.9","1.6.6"],"ghsa_id":"GHSA-296w-6qhq-gf92","id":"tcs_01M5KES8J7V7DE411PHYVPM2JJ","modified_at":"2025-02-19T05:35:45.525230Z","published_at":"2022-05-14T02:05:08Z","references":["https://osv.dev/vulnerability/GHSA-296w-6qhq-gf92","https://nvd.nist.gov/vuln/detail/CVE-2014-0481","https://github.com/django/django/commit/26cd48e166ac4d84317c8ee6d63ac52a87e8da99","https://github.com/django/django/commit/30042d475bf084c6723c6217a21598d9247a9c41","https://github.com/django/django/commit/dd0c3f4ee1a30c1a1e6055061c6ba6e58c6b54d1","https://github.com/django/django","https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2014-5.yaml","https://www.djangoproject.com/weblog/2014/aug/20/security","http://lists.opensuse.org/opensuse-updates/2014-09/msg00023.html","http://www.debian.org/security/2014/dsa-3010"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-296w-6qhq-gf92","url":"https://osv.dev/vulnerability/GHSA-296w-6qhq-gf92"}],"summary":"Django denial of service via file upload naming"}