Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-44420
7.3
HIGHCVSS v3
Published
December 8, 2021
CVSS v2
7.5 HIGH
Affected
9 projects
Assigned by
MITRE
Severity scale
010
Description
In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, HTTP requests for URLs with trailing newlines could bypass upstream access control based on URL paths.
django/django
GitHubThe Web framework for perfectionists with deadlines.
GitHubThe Web framework for perfectionists with deadlines.>= 2.2, < 2.2.25, >= 3.1, < 3.1.14, >= 3.2, < 3.2.10, >= 2.2a1, < 2.2.25, >= 3.0a1, < 3.1.14, >= 3.2a1, < 3.2.10NVD
DjangoPython Package IndexA high-level Python web framework that encourages rapid development and clean, pragmatic design.
Python Package IndexA high-level Python web framework that encourages rapid development and clean, pragmatic design.>= 2.2, < 2.2.25, >= 3.1, < 3.1.14, >= 3.2, < 3.2.10, >= 2.2a1, < 2.2.25, >= 3.0a1, < 3.1.14, >= 3.2a1, < 3.2.10NVD
Docker Hub
NPM
Crates.io
RubyGems