{"action":"Upgrade django to 0.91.1 or later.","affected":[{"fixed":"0.96.1","introduced":"0.96.0"},{"fixed":"0.95.2","introduced":"0.95"},{"fixed":"0.91.1","introduced":"0.91.0"}],"component":"django","cve_ids":["CVE-2007-5712"],"ecosystem":"PyPI","epss":0.01814,"exploited":false,"fixed_versions":["0.96.1","0.95.2","0.91.1"],"ghsa_id":"GHSA-9v8h-57gv-qch6","id":"tcs_01M5KFBHRX64JPSJ05WA7KC05J","modified_at":"2024-11-18T16:26:20Z","published_at":"2022-05-01T18:36:08Z","references":["https://osv.dev/vulnerability/GHSA-9v8h-57gv-qch6","https://nvd.nist.gov/vuln/detail/CVE-2007-5712","https://github.com/django/django/commit/412ed22502e11c50dbfee854627594f0e7e2c234","https://github.com/django/django/commit/7dd2dd08a79e388732ce00e2b5514f15bd6d0f6f","https://github.com/django/django/commit/8bc36e726c9e8c75c681d3ad232df8e882aaac81","https://exchange.xforce.ibmcloud.com/vulnerabilities/38143","https://github.com/django/django","https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2007-1.yaml","https://web.archive.org/web/20091201070224/http://secunia.com/advisories/27435","https://web.archive.org/web/20111224195100/http://secunia.com/advisories/27597","https://web.archive.org/web/20111229085535/http://secunia.com/advisories/31961","https://web.archive.org/web/20200228183657/http://www.securityfocus.com/bid/26227","https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00243.html","https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00257.html","http://sourceforge.net/forum/forum.php?forum_id=749199","http://www.debian.org/security/2008/dsa-1640","http://www.djangoproject.com/weblog/2007/oct/26/security-fix"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-9v8h-57gv-qch6","url":"https://osv.dev/vulnerability/GHSA-9v8h-57gv-qch6"}],"summary":"Django vulnerable to Denial of Service via i18n middleware component"}