{"action":"Upgrade django to 4.2.14 or later.","affected":[{"fixed":"4.2.14","introduced":"4.2"},{"fixed":"5.0.7","introduced":"5.0"}],"component":"django","cve_ids":["CVE-2024-38875"],"ecosystem":"PyPI","epss":0.01187,"exploited":false,"fixed_versions":["4.2.14","5.0.7"],"ghsa_id":"GHSA-qg2p-9jwr-mmqf","id":"tcs_01M5KFW0ES2X95D0QEKNZH3FNZ","modified_at":"2026-09-10T03:50:16.815693765Z","published_at":"2024-07-10T06:33:52Z","references":["https://osv.dev/vulnerability/GHSA-qg2p-9jwr-mmqf","https://nvd.nist.gov/vuln/detail/CVE-2024-38875","https://github.com/django/django/commit/7285644640f085f41d60ab0c8ae4e9153f0485db","https://github.com/django/django/commit/79f368764295df109a37192f6182fb6f361d85b5","https://docs.djangoproject.com/en/dev/releases/security","https://github.com/django/django","https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2024-56.yaml","https://groups.google.com/forum/#%21forum/django-announce","https://security.netapp.com/advisory/ntap-20240808-0005","https://www.djangoproject.com/weblog/2024/jul/09/security-releases"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-qg2p-9jwr-mmqf","url":"https://osv.dev/vulnerability/GHSA-qg2p-9jwr-mmqf"}],"summary":"Django vulnerable to Denial of Service"}