{"action":"Upgrade django to 1.8.19 or later.","affected":[{"fixed":"2.0.3","introduced":"2.0a1"},{"fixed":"1.11.11","introduced":"1.11a1"},{"fixed":"1.8.19","introduced":"1.8a1"}],"component":"django","cve_ids":["CVE-2018-7536"],"ecosystem":"PyPI","epss":0.04554,"exploited":false,"fixed_versions":["2.0.3","1.11.11","1.8.19"],"ghsa_id":"GHSA-r28v-mw67-m5p9","id":"tcs_01M5KFWZ53HS6SGA6G8DP0ZD0B","modified_at":"2024-09-18T20:09:50.350214Z","published_at":"2019-01-04T17:50:07Z","references":["https://osv.dev/vulnerability/GHSA-r28v-mw67-m5p9","https://nvd.nist.gov/vuln/detail/CVE-2018-7536","https://github.com/django/django/commit/1ca63a66ef3163149ad822701273e8a1844192c2","https://github.com/django/django/commit/abf89d729f210c692a50e0ad3f75fb6bec6fae16","https://github.com/django/django/commit/e157315da3ae7005fa0683ffc9751dbeca7306c8","https://access.redhat.com/errata/RHSA-2018:2927","https://access.redhat.com/errata/RHSA-2019:0051","https://access.redhat.com/errata/RHSA-2019:0082","https://access.redhat.com/errata/RHSA-2019:0265","https://github.com/advisories/GHSA-r28v-mw67-m5p9","https://github.com/django/django","https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2018-5.yaml","https://lists.debian.org/debian-lts-announce/2018/03/msg00006.html","https://usn.ubuntu.com/3591-1","https://web.archive.org/web/20200227131019/http://www.securityfocus.com/bid/103361","https://www.debian.org/security/2018/dsa-4161","https://www.djangoproject.com/weblog/2018/mar/06/security-releases"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-r28v-mw67-m5p9","url":"https://osv.dev/vulnerability/GHSA-r28v-mw67-m5p9"}],"summary":"Django denial-of-service possibility in urlize and urlizetrunc template filters"}