{"action":"Upgrade django-markupfield to 1.3.2 or later.","affected":[{"fixed":"1.3.2","introduced":"0"}],"component":"django-markupfield","cve_ids":["CVE-2015-0846"],"ecosystem":"PyPI","epss":0.01794,"exploited":false,"fixed_versions":["1.3.2"],"ghsa_id":"GHSA-wxmr-7xjv-8xqw","id":"tcs_01M5KG6J807VW3GGNMG9AC2HNE","modified_at":"2026-06-10T17:00:49.032842341Z","published_at":"2015-04-24T14:59:00Z","references":["https://osv.dev/vulnerability/PYSEC-2015-12","http://www.debian.org/security/2015/dsa-3230","https://github.com/jamesturk/django-markupfield/blob/master/CHANGELOG","https://github.com/advisories/GHSA-wxmr-7xjv-8xqw"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2015-12","url":"https://osv.dev/vulnerability/PYSEC-2015-12"}],"summary":"django-markupfield before 1.3.2 uses the default docutils RESTRUCTUREDTEXT_FILTER_SETTINGS settings, which allows remote attackers to include and read arbitrary files via unspecified vectors."}