{"action":"Upgrade django-photologue to 3.16 or later.","affected":[{"fixed":"3.16","introduced":"0"}],"component":"django-photologue","cve_ids":["CVE-2022-4526"],"ecosystem":"PyPI","epss":0.00558,"exploited":false,"fixed_versions":["3.16"],"ghsa_id":"GHSA-287q-jfcp-9vhv","id":"tcs_01M5KGHNHRA3KK57VD7ZV86SA9","modified_at":"2026-06-10T17:00:50.125589781Z","published_at":"2022-12-15T21:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2022-43061","https://github.com/richardbarran/django-photologue/commit/960cb060ce5e2964e6d716ff787c72fc18a371e7","https://github.com/richardbarran/django-photologue/issues/223","https://vuldb.com/?id.215906","https://github.com/advisories/GHSA-287q-jfcp-9vhv"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"PYSEC-2022-43061","url":"https://osv.dev/vulnerability/PYSEC-2022-43061"}],"summary":"A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected by this issue is some unknown functionality of the file photologue/templates/photologue/photo_detail"}