Known vulnerabilities in py3-django (Alpine package)

Known vulnerabilities in py3-django (Alpine package)

Vendor: Alpine Linux Development Team

Software: py3-django (Alpine package)

Software CPE: cpe:2.3:o:alpine:py3-django_alpine_package:*:*:*:*:*:alpine_linux:*:*

Website: https://alpinelinux.org/

Total vulnerabilities: 9

Public exploits: 3

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (9)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU46660 - Incorrect Default Permissions CVE-2020-24584	CWE-276	Medium	No	No	-	11.09.2020	SB2020091027 SB2020091118 SB2020121611 and 5 more
#VU46659 - Incorrect Default Permissions CVE-2020-24583	CWE-276	Medium	No	No	-	11.09.2020	SB2020091027 SB2020091118 SB2020121610 and 5 more
#VU28954 - Improper Certificate Validation CVE-2020-13254	CWE-295	Medium	Available	No	-	10.06.2020	SB2020061040 SB2020061041 SB2020121608 and 5 more
#VU28953 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-13596	CWE-79	Low	No	No	-	10.06.2020	SB2020061040 SB2020061041 SB2020121609 and 4 more
#VU25812 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2020-9402	CWE-89	High	No	No	1.11.29-r0	08.03.2020	SB2020030801 SB2020030802 SB2020050101 and 6 more
#VU24846 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2020-7471	CWE-89	Medium	Available	No	1.11.28-r0	03.02.2020	SB2020020315 SB2020020316 SB2020021911 and 6 more
#VU23667 - Improper input validation CVE-2019-19844	CWE-20	High	Available	No	1.11.27-r0	18.12.2019	SB2019121815 SB2019121916 SB2020010811 and 7 more
#VU19618 - Resource Management Errors CVE-2019-14233	CWE-399	Medium	No	No	1.11.27-r0	01.08.2019	SB2019080105 SB2019080204 SB2019080601 and 12 more
#VU19617 - Resource Management Errors CVE-2019-14232	CWE-399	Medium	No	No	1.11.27-r0	01.08.2019	SB2019080105 SB2019080204 SB2019080601 and 14 more