Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2016-9014
6.8
MEDIUMCVSS v2
Published
December 9, 2016
Affected
6 projects
Assigned by
MITRE
Severity scale
010
Description
Django before 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3, when settings.DEBUG is True, allow remote attackers to conduct DNS rebinding attacks by leveraging failure to validate the HTTP Host header against settings.ALLOWED_HOSTS.
django/django
GitHubThe Web framework for perfectionists with deadlines.
GitHubThe Web framework for perfectionists with deadlines.= 1.8.15, = 1.8.2, = 1.8.14, = 1.8.1, = 1.8.7, = 1.8.9, = 1.8.11, = 1.8.3, = 1.8.12, = 1.8.10, = 1.8.4, = 1.8.5, = 1.8.13, = 1.8, = 1.8.8, = 1.8.6, = 1.10, = 1.10.1, = 1.10.2, = 1.9.6, = 1.9.9, = 1.9.5, = 1.9.3, = 1.9.4, = 1.9.7, = 1.9.1, = 1.9, = 1.9.8, = 1.9.10, = 1.9.2NVD
DjangoPython Package IndexA high-level Python web framework that encourages rapid development and clean, pragmatic design.
Python Package IndexA high-level Python web framework that encourages rapid development and clean, pragmatic design.= 1.8.15, = 1.8.2, = 1.8.14, = 1.8.1, = 1.8.7, = 1.8.9, = 1.8.11, = 1.8.3, = 1.8.12, = 1.8.10, = 1.8.4, = 1.8.5, = 1.8.13, = 1.8, = 1.8.8, = 1.8.6, = 1.10, = 1.10.1, = 1.10.2, = 1.9.6, = 1.9.9, = 1.9.5, = 1.9.3, = 1.9.4, = 1.9.7, = 1.9.1, = 1.9, = 1.9.8, = 1.9.10, = 1.9.2NVD
Docker Hub
NPM
RubyGems