Known vulnerabilities in py-django (Alpine package)

Vendor: Alpine Linux Development Team
Software: py-django (Alpine package)
Software CPE: cpe:2.3:o:alpine:py-django_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 39
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting py-django (Alpine package) py-django (Alpine package) is affected by 39 known vulnerabilities: 5 high, 19 medium, 15 low Critical High Medium Low

Vulnerabilities (39)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU46660 - Incorrect Default Permissions
CVE-2020-24584		 CWE-276 Medium
No
No
 1.11.29-r1 11.09.2020 SB2020091027
SB2020091118
SB2020121611
and 5 more
#VU46659 - Incorrect Default Permissions
CVE-2020-24583		 CWE-276 Medium
No
No
 1.11.29-r1 11.09.2020 SB2020091027
SB2020091118
SB2020121610
and 5 more
#VU25812 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-9402		 CWE-89 High
No
No
 1.11.29-r0 08.03.2020 SB2020030801
SB2020030802
SB2020050101
and 6 more
#VU24846 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-7471		 CWE-89 Medium
Available
No
 1.11.28-r0 03.02.2020 SB2020020315
SB2020020316
SB2020021911
and 6 more
#VU23667 - Improper input validation
CVE-2019-19844		 CWE-20 High
Available
No
 1.11.27-r0 18.12.2019 SB2019121815
SB2019121916
SB2020010811
and 7 more
#VU19620 - Resource Management Errors
CVE-2019-14235		 CWE-399 Medium
No
No
 1.11.23-r0 01.08.2019 SB2019080105
SB2019080204
SB2019080601
and 9 more
#VU19619 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-14234		 CWE-89 High
No
No
 1.11.23-r0 01.08.2019 SB2019080105
SB2019080204
SB2019080601
and 9 more
#VU19618 - Resource Management Errors
CVE-2019-14233		 CWE-399 Medium
No
No
 1.11.23-r0 01.08.2019 SB2019080105
SB2019080204
SB2019080601
and 12 more
#VU19617 - Resource Management Errors
CVE-2019-14232		 CWE-399 Medium
No
No
 1.11.23-r0, 1.11.27-r0 01.08.2019 SB2019080105
SB2019080204
SB2019080601
and 14 more
#VU18967 - Cleartext Transmission of Sensitive Information
CVE-2019-12781		 CWE-319 Medium
No
No
 1.11.22-r0 02.07.2019 SB2019070211
SB2019070601
SB2019070602
and 8 more
#VU18672 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-12308		 CWE-79 Low
No
No
 1.11.21-r0 04.06.2019 SB2019060403
SB2019060404
SB2019060406
and 10 more
#VU17717 - Resource exhaustion
CVE-2019-6975		 CWE-400 Low
No
No
 1.11.20-r0 15.02.2019 SB2019021505
SB2019021814
SB2019070501
and 8 more
#VU16832 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2019-3498		 CWE-451 Low
No
No
 1.11.18-r0 07.01.2019 SB2019010703
SB2019010907
SB2019011001
and 7 more
#VU14175 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2018-14574		 CWE-601 Low
No
No
 1.11.15-r0 01.08.2018 SB2018080209
SB2018080301
SB2018080401
and 12 more
#VU11476 - Resource exhaustion
CVE-2018-7537		 CWE-400 Low
No
No
 1.8.19-r0 03.04.2018 SB2018030608
SB2018030609
SB2018040302
and 9 more
#VU10952 - Improper input validation
CVE-2018-7536		 CWE-20 Low
No
No
 1.8.19-r0 13.03.2018 SB2018030605
SB2018030608
SB2018030609
and 12 more
#VU10386 - Exposure of sensitive information to an unauthorized actor
CVE-2018-6188		 CWE-200 Low
No
No
 1.11.10-r0, 1.11.11-r0 06.02.2018 SB2018020605
SB2018020708
SB2018022301
and 3 more
#VU8115 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-12794		 CWE-79 Low
No
No
 1.11.5-r0, 1.11.11-r0 06.09.2017 SB2017090602
SB2018020708
SB2018020216
and 1 more
#VU7106 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2017-7234		 CWE-601 Low
No
No
 1.8.18-r0 16.06.2017 SB2017061603
SB2017040601
SB2017040602
and 2 more
#VU7105 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-7233		 CWE-79 Low
No
No
 1.8.18-r0 16.06.2017 SB2017061603
SB2017040601
SB2017040602
and 12 more


Showing elements 1 - 20 out of 39