An issue was discovered in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1. Due to leveraging the Django Template Language's variable resolution logic, the dictsort template filter was potentially vulnerable to information disclosure, or an unintended method call, if passed a suitably crafted key.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade py3-django | Aug 22, 2024 | Jan 4, 2022 |
| Centos_linux | — | Upgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-unfUpgrade rubygem-hammer_cli_foremanUpgrade tfm-rubygem-clampUpgrade tfm-rubygem-hammer_cliUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-localeUpgrade rubygem-powerbarUpgrade rubygem-unf_ext-debuginfoUpgrade foreman-cliUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-highlineUpgrade tfm-rubygem-amazing_printUpgrade tfm-runtimeUpgrade rubygem-foreman_maintainUpgrade tfm-rubygem-fast_gettextUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-unicodeUpgrade rubygem-unfUpgrade rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-multi_jsonUpgrade tfm-rubygem-oauthUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade satellite-cloneUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-mime-typesUpgrade tfm-rubygem-netrcUpgrade rubygem-unf_ext-debugsourceUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-unf_extUpgrade tfm-rubygem-jwtUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cli_foreman_templatesUpgrade satellite-cliUpgrade rubygem-mime-types-dataUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade rubygem-apipie-bindingsUpgrade rubygem-domain_nameUpgrade tfm-rubygem-rest-clientUpgrade rubygem-mime-typesUpgrade rubygem-unicode-display_widthUpgrade rubygem-hashieUpgrade satellite-maintainUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade rubygem-netrcUpgrade tfm-rubygem-hammer_cli_katelloUpgrade rubygem-unicodeUpgrade rubygem-rest-clientUpgrade rubygem-loggingUpgrade rubygem-amazing_printUpgrade rubygem-unicode-debugsourceUpgrade tfm-rubygem-apipie-bindingsUpgrade tfm-rubygem-hashieUpgrade tfm-rubygem-hammer_cli_foremanUpgrade tfm-rubygem-loggingUpgrade tfm-rubygem-little-pluggerUpgrade rubygem-multi_jsonUpgrade rubygem-fast_gettextUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-domain_nameUpgrade rubygem-highlineUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-mime-types-dataUpgrade rubygem-hammer_cliUpgrade rubygem-localeUpgrade rubygem-jwtUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-unicode-display_widthUpgrade tfm-rubygem-unicode-debuginfoUpgrade tfm-rubygem-powerbarUpgrade rubygem-oauthUpgrade rubygem-little-pluggerUpgrade tfm-rubygem-unf_extUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-unicode-debuginfoUpgrade rubygem-clamp | Jul 14, 2022 | Jan 5, 2022 |
| Debian | — | Upgrade python-django | Nov 7, 2022 | Jan 5, 2022 |
| Freebsd | — | Upgrade py37-django32Upgrade py38-django32Upgrade py38-django22Upgrade py37-django40Upgrade py39-django22Upgrade py39-django32Upgrade py37-django22Upgrade py38-django40Upgrade py39-django40 | Nov 4, 2022 | Jan 6, 2022 |
| Gentoo Linux | — | Upgrade dev-python/django. | Sep 18, 2025 | Sep 17, 2025 |
| Redhat_linux | — | Upgrade rubygem-unicode-debuginfoUpgrade rubygem-multi_jsonUpgrade tfm-rubygem-amazing_printUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-jwtUpgrade tfm-rubygem-hammer_cli_foremanUpgrade rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-loggingUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-jwtUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-domain_nameUpgrade rubygem-unicode-debugsourceUpgrade tfm-runtimeUpgrade rubygem-http-cookieUpgrade satellite-cloneUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-unfUpgrade rubygem-amazing_printUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-multi_jsonUpgrade satellite-cliUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-powerbarUpgrade tfm-rubygem-unf_extUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-http-cookieUpgrade rubygem-apipie-bindingsUpgrade tfm-rubygem-clampUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-hammer_cliUpgrade rubygem-little-pluggerUpgrade tfm-rubygem-oauthUpgrade tfm-rubygem-fast_gettextUpgrade tfm-rubygem-powerbarUpgrade rubygem-mime-typesUpgrade rubygem-loggingUpgrade tfm-rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-unfUpgrade rubygem-mime-types-dataUpgrade rubygem-unicodeUpgrade rubygem-hammer_cli_foremanUpgrade tfm-rubygem-rest-clientUpgrade rubygem-netrcUpgrade foreman-cliUpgrade rubygem-clampUpgrade tfm-rubygem-netrcUpgrade rubygem-unf_extUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade rubygem-foreman_maintainUpgrade tfm-rubygem-little-pluggerUpgrade rubygem-rest-clientUpgrade tfm-rubygem-mime-types-dataUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-unicode-debuginfoUpgrade rubygem-unicode-display_widthUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-localeUpgrade rubygem-hashieUpgrade rubygem-unf_ext-debugsourceUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-hammer_cli_katelloUpgrade tfm-rubygem-hashieUpgrade tfm-rubygem-highlineUpgrade rubygem-highlineUpgrade tfm-rubygem-domain_nameUpgrade tfm-rubygem-unicode-display_widthUpgrade tfm-rubygem-localeUpgrade rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-unicodeUpgrade tfm-rubygem-mime-typesUpgrade rubygem-hammer_cliUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-hammer_cli_foreman_remote_execution | Jul 14, 2022 | Jan 5, 2022 |
| Rocky_linux | — | Upgrade libdb-debugsourceUpgrade libdb-utils-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-cxxUpgrade libdb-debuginfoUpgrade libdb-cxx-debuginfo | Mar 12, 2024 | Jan 5, 2022 |
| Suse | — | Upgrade python3-django | Aug 9, 2024 | Jan 5, 2022 |
| Ubuntu | — | Upgrade python-djangoUpgrade python3-django | Jan 6, 2022 | Jan 5, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub