{"action":"Upgrade django to 2.2.20 or later.","affected":[{"fixed":"2.2.20","introduced":"2.2a1"},{"fixed":"3.0.14","introduced":"3.0a1"},{"fixed":"3.1.8","introduced":"3.1a1"}],"component":"django","cve_ids":["CVE-2021-28658"],"ecosystem":"PyPI","epss":0.03761,"exploited":false,"fixed_versions":["2.2.20","3.0.14","3.1.8"],"ghsa_id":"GHSA-xgxc-v2qg-chmh","id":"tcs_01M5KG47D99XKNBQ6TQ5NC4TTX","modified_at":"2024-09-20T16:08:04.482170Z","published_at":"2021-04-08T18:11:48Z","references":["https://osv.dev/vulnerability/GHSA-xgxc-v2qg-chmh","https://nvd.nist.gov/vuln/detail/CVE-2021-28658","https://docs.djangoproject.com/en/3.1/releases/security","https://github.com/advisories/GHSA-xgxc-v2qg-chmh","https://github.com/django/django","https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2021-6.yaml","https://groups.google.com/g/django-announce/c/ePr5j-ngdPU","https://lists.debian.org/debian-lts-announce/2021/04/msg00008.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZVKYPHR3TKR2ESWXBPOJEKRO2OSJRZUE","https://pypi.org/project/Django","https://security.netapp.com/advisory/ntap-20210528-0001","https://www.djangoproject.com/weblog/2021/apr/06/security-releases"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-xgxc-v2qg-chmh","url":"https://osv.dev/vulnerability/GHSA-xgxc-v2qg-chmh"}],"summary":"Directory Traversal in Django"}