Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2016-2513
2.6
LOWCVSS v2
Published
April 8, 2016
Affected
4 projects
Assigned by
MITRE
Severity scale
010
Description
The password hasher in contrib/auth/hashers.py in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to enumerate users via a timing attack involving login requests.
django/django
GitHubThe Web framework for perfectionists with deadlines.
GitHubThe Web framework for perfectionists with deadlines.= 1.8.9, = 1.9.1, = 1.9, = 1.9.2, < 1.8.10, >= 1.9, < 1.9.3NVD
DjangoPython Package IndexA high-level Python web framework that encourages rapid development and clean, pragmatic design.
Python Package IndexA high-level Python web framework that encourages rapid development and clean, pragmatic design.= 1.8.9, = 1.9.1, = 1.9, = 1.9.2, < 1.8.10, >= 1.9, < 1.9.3NVD
Docker Hub
NPM