{"action":"Upgrade django to 1.11.22 or later.","affected":[{"fixed":"2.1.10","introduced":"2.1"},{"fixed":"2.2.3","introduced":"2.2"},{"fixed":"1.11.22","introduced":"1.11"}],"component":"django","cve_ids":["CVE-2019-12781"],"ecosystem":"PyPI","epss":0.01711,"exploited":false,"fixed_versions":["2.1.10","2.2.3","1.11.22"],"ghsa_id":"GHSA-6c7v-2f49-8h26","id":"tcs_01M5KF32RCNKEZ53RDB72BE7E2","modified_at":"2024-09-18T16:26:02.265514Z","published_at":"2019-07-03T20:37:25Z","references":["https://osv.dev/vulnerability/GHSA-6c7v-2f49-8h26","https://nvd.nist.gov/vuln/detail/CVE-2019-12781","https://docs.djangoproject.com/en/dev/releases/security","https://github.com/advisories/GHSA-6c7v-2f49-8h26","https://github.com/django/django","https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2019-10.yaml","https://groups.google.com/forum/#!topic/django-announce/Is4kLY9ZcZQ","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5VXXWIOQGXOB7JCGJ3CVUW673LDHKEYL","https://seclists.org/bugtraq/2019/Jul/10","https://security.netapp.com/advisory/ntap-20190705-0002","https://usn.ubuntu.com/4043-1","https://www.debian.org/security/2019/dsa-4476","https://www.djangoproject.com/weblog/2019/jul/01/security-releases","http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00006.html","http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00025.html","http://www.openwall.com/lists/oss-security/2019/07/01/3"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-6c7v-2f49-8h26","url":"https://osv.dev/vulnerability/GHSA-6c7v-2f49-8h26"}],"summary":"Django Incorrect HTTP detection with reverse-proxy connecting via HTTPS"}