{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"django-haystack","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":[],"id":"tcs_01M5NPN6FVJ3WH0SZHS33K1H7F","modified_at":"2026-10-07T09:47:29.798573870Z","published_at":"2026-10-05T13:16:52.823Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2026-105315","https://security-tracker.debian.org/tracker/CVE-2026-105315"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2026-105315#Debian:14/django-haystack","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2026-105315"}],"summary":"A vulnerability has been found in django-haystack up to 3.3.0. Affected is the function _to_python of the file haystack/backends/elasticsearch_backend.py of the component more_like_this Template Tag H"}