{"action":"Upgrade django to 1.4.13 or later.","affected":[{"fixed":"1.4.13","introduced":"1.4"},{"fixed":"1.5.8","introduced":"1.5"},{"fixed":"1.6.5","introduced":"1.6"},{"fixed":"1.7b4","introduced":"1.7a1"}],"component":"django","cve_ids":["CVE-2014-1418"],"ecosystem":"PyPI","epss":0.02567,"exploited":false,"fixed_versions":["1.4.13","1.5.8","1.6.5","1.7b4"],"ghsa_id":"GHSA-q7q2-qf2q-rw3w","id":"tcs_01M5KFVKQKZ6QG6DNRCVMGV07R","modified_at":"2024-11-28T05:41:16.988361Z","published_at":"2022-05-17T03:07:00Z","references":["https://osv.dev/vulnerability/GHSA-q7q2-qf2q-rw3w","https://nvd.nist.gov/vuln/detail/CVE-2014-1418","https://github.com/django/django/commit/1abcf3a808b35abae5d425ed4d44cb6e886dc769","https://github.com/django/django/commit/28e23306aa53bbbb8fb87db85f99d970b051026c","https://github.com/django/django/commit/4001ec8698f577b973c5a540801d8a0bbea1205b","https://github.com/django/django","https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2014-19.yaml","https://www.djangoproject.com/weblog/2014/may/14/security-releases-issued","http://lists.opensuse.org/opensuse-updates/2014-09/msg00023.html","http://ubuntu.com/usn/usn-2212-1","http://www.debian.org/security/2014/dsa-2934","http://www.openwall.com/lists/oss-security/2014/05/14/10","http://www.openwall.com/lists/oss-security/2014/05/15/3"],"severity":{"label":"high","score":7.4},"sources":[{"source":"osv","source_id":"GHSA-q7q2-qf2q-rw3w","url":"https://osv.dev/vulnerability/GHSA-q7q2-qf2q-rw3w"}],"summary":"Django Vulnerable to Cache Poisoning"}