{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.1.3"}],"component":"django-make-app","cve_ids":["CVE-2017-16764"],"ecosystem":"PyPI","epss":0.0353,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-9pv8-q5rx-c8gq","id":"tcs_01M5KFBAR645AQFPVMRNYZ51Q0","modified_at":"2025-02-16T05:29:40.502933Z","published_at":"2018-07-13T15:16:59Z","references":["https://osv.dev/vulnerability/GHSA-9pv8-q5rx-c8gq","https://nvd.nist.gov/vuln/detail/CVE-2017-16764","https://github.com/illagrenan/django-make-app/issues/5","https://github.com/illagrenan/django-make-app/commit/acd814433d1021aa8783362521b0bd151fdfc9d2","https://github.com/advisories/GHSA-9pv8-q5rx-c8gq","https://github.com/illagrenan/django-make-app","https://github.com/pypa/advisory-database/tree/main/vulns/django-make-app/PYSEC-2017-79.yaml","https://joel-malwarebenchmark.github.io/blog/2017/11/12/cve-2017-16764-vulnerability-in-django-make-app"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-9pv8-q5rx-c8gq","url":"https://osv.dev/vulnerability/GHSA-9pv8-q5rx-c8gq"}],"summary":"django_make_app is vulnerable to Code Injection"}