{"action":"Upgrade django to 1.8.3 or later.","affected":[{"fixed":"1.8.3","introduced":"1.8a1"}],"component":"django","cve_ids":["CVE-2015-5145"],"ecosystem":"PyPI","epss":0.03,"exploited":false,"fixed_versions":["1.8.3"],"ghsa_id":"GHSA-cqf7-ff9h-7967","id":"tcs_01M5KFDGSF6MCHA39C2HV7MAFC","modified_at":"2024-09-18T16:24:53.504285Z","published_at":"2022-05-17T00:48:30Z","references":["https://osv.dev/vulnerability/GHSA-cqf7-ff9h-7967","https://nvd.nist.gov/vuln/detail/CVE-2015-5145","https://github.com/django/django/commit/8f9a4d3a2bc42f14bb437defd30c7315adbff22c","https://github.com/django/django","https://github.com/django/django/blob/4555a823fd57e261e1b19c778429473256c8ea08/docs/releases/1.8.3.txt#L63-L68","https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2015-21.yaml","https://security.gentoo.org/glsa/201510-06","https://web.archive.org/web/20150924150801/http://www.securitytracker.com/id/1032820","https://web.archive.org/web/20170526042302/http://www.securityfocus.com/bid/75691","https://www.djangoproject.com/weblog/2015/jul/08/security-releases"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-cqf7-ff9h-7967","url":"https://osv.dev/vulnerability/GHSA-cqf7-ff9h-7967"}],"summary":"Django ReDoS in validators.URLValidator"}