Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-22818
6.1
MEDIUMCVSS v3
Published
February 3, 2022
CVSS v2
4.3 MEDIUM
Affected
9 projects
Assigned by
MITRE
Severity scale
010
Description
The {% debug %} template tag in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2 does not properly encode the current context. This may lead to XSS.
django/django
GitHubThe Web framework for perfectionists with deadlines.
GitHubThe Web framework for perfectionists with deadlines.>= 3.2, < 3.2.12, >= 4.0, < 4.0.2, >= 2.2, < 2.2.27NVD
DjangoPython Package IndexA high-level Python web framework that encourages rapid development and clean, pragmatic design.
Python Package IndexA high-level Python web framework that encourages rapid development and clean, pragmatic design.>= 3.2, < 3.2.12, >= 4.0, < 4.0.2, >= 2.2, < 2.2.27NVD
django
Docker Hub
NPM
Crates.io
RubyGems