The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The session backends in Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (session store consumption) via multiple requests with unique session keys.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade py-django | Aug 30, 2017 | Jul 14, 2015 |
| Debian | — | Upgrade python-django | Jul 30, 2024 | Jul 14, 2015 |
| Freebsd | — | Upgrade py33-django-develUpgrade py32-django-develUpgrade py27-django-develUpgrade py33-djangoUpgrade py34-django-develUpgrade py27-djangoUpgrade py34-djangoUpgrade py32-django | Dec 10, 2025 | Jul 9, 2015 |
| Gentoo Linux | — | Upgrade dev-python/django. | Oct 30, 2017 | Jul 14, 2015 |
| Oracle Solaris | — | Upgrade library/python/django to version 1.4.22-0.175.3.1.0.2.0 on Solaris 11.3Upgrade library/python/django-26 to version 1.4.22-0.175.3.1.0.2.0 on Solaris 11.3Upgrade library/python/django-27 to version 1.4.22-0.175.3.1.0.2.0 on Solaris 11.3 | May 29, 2017 | Jul 14, 2015 |
| Suse | — | Upgrade python-django | Dec 18, 2015 | Jul 14, 2015 |
| Ubuntu | — | Upgrade python3-djangoUpgrade python-django | Nov 8, 2024 | Jul 14, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub