The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, HTTP requests for URLs with trailing newlines could bypass upstream access control based on URL paths.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade py3-django | Aug 22, 2024 | Dec 7, 2021 |
| Centos_linux | — | Upgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hashieUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-unicodeUpgrade tfm-rubygem-unicode-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-rest-clientUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade rubygem-amazing_printUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-http-cookieUpgrade satellite-brandingUpgrade rubygem-hammer_cliUpgrade rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-netrcUpgrade tfm-rubygem-hammer_cli_katelloUpgrade tfm-rubygem-highlineUpgrade tfm-rubygem-http-cookieUpgrade tfm-rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-hammer_cliUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-amazing_printUpgrade rubygem-clampUpgrade rubygem-powerbarUpgrade rubygem-rest-clientUpgrade tfm-rubygem-mime-types-dataUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-unf_extUpgrade rubygem-highlineUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foremanUpgrade foreman-cliUpgrade tfm-rubygem-hashieUpgrade tfm-rubygem-mime-typesUpgrade rubygem-oauthUpgrade rubygem-foreman_maintainUpgrade rubygem-unicode-display_widthUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade satelliteUpgrade satellite-maintainUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade rubygem-localeUpgrade satellite-cloneUpgrade tfm-rubygem-localeUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-netrcUpgrade rubygem-mime-types-dataUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-apipie-bindingsUpgrade rubygem-domain_nameUpgrade tfm-rubygem-fast_gettextUpgrade rubygem-unicode-debugsourceUpgrade rubygem-unicode-debuginfoUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-fast_gettextUpgrade tfm-rubygem-little-pluggerUpgrade tfm-rubygem-powerbarUpgrade rubygem-mime-typesUpgrade tfm-rubygem-loggingUpgrade rubygem-loggingUpgrade satellite-cliUpgrade tfm-rubygem-oauthUpgrade tfm-rubygem-clampUpgrade rubygem-hammer_cli_katelloUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-hammer_cli_foremanUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-unfUpgrade rubygem-jwtUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-unicodeUpgrade tfm-rubygem-unfUpgrade tfm-rubygem-jwtUpgrade tfm-rubygem-domain_nameUpgrade rubygem-little-pluggerUpgrade tfm-rubygem-unicode-display_widthUpgrade tfm-rubygem-unf_extUpgrade rubygem-apipie-bindingsUpgrade tfm-runtimeUpgrade rubygem-hammer_cli_foreman_remote_execution | Jul 14, 2022 | Dec 8, 2021 |
| Debian | — | Upgrade python-django | Jul 30, 2024 | Dec 8, 2021 |
| Gentoo Linux | — | Upgrade dev-python/django. | Sep 18, 2025 | Sep 17, 2025 |
| Oracle Solaris | — | Upgrade library/python/django to version 3.2.10-11.4.42.0.1.113.0 on Solaris 11.4Upgrade library/python/django-37 to version 2.2.25-11.4.42.0.1.113.0 on Solaris 11.4Upgrade library/python/django-39 to version 3.2.10-11.4.42.0.1.113.0 on Solaris 11.4 | Feb 17, 2022 | Dec 8, 2021 |
| Oracle_linux | — | Upgrade python3-olamkitUpgrade ol-automation-managerUpgrade ol-automation-manager-cli | Apr 28, 2022 | Dec 8, 2021 |
| Redhat_linux | — | Upgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-multi_jsonUpgrade foreman-cliUpgrade tfm-rubygem-unicodeUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-mime-typesUpgrade rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-localeUpgrade tfm-rubygem-unfUpgrade tfm-rubygem-netrcUpgrade tfm-rubygem-unicode-debuginfoUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hashieUpgrade tfm-rubygem-highlineUpgrade rubygem-mime-typesUpgrade tfm-rubygem-amazing_printUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-hammer_cli_katelloUpgrade tfm-rubygem-little-pluggerUpgrade tfm-rubygem-fast_gettextUpgrade rubygem-http-cookieUpgrade satellite-cliUpgrade rubygem-hammer_cliUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade rubygem-amazing_printUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-rest-clientUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade rubygem-fast_gettextUpgrade rubygem-oauthUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-oauthUpgrade rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-loggingUpgrade tfm-rubygem-mime-types-dataUpgrade tfm-rubygem-loggingUpgrade rubygem-apipie-bindingsUpgrade rubygem-domain_nameUpgrade tfm-rubygem-apipie-bindingsUpgrade tfm-rubygem-hashieUpgrade rubygem-unf_extUpgrade tfm-runtimeUpgrade satellite-cloneUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-foreman_maintainUpgrade tfm-rubygem-jwtUpgrade tfm-rubygem-domain_nameUpgrade rubygem-highlineUpgrade tfm-rubygem-localeUpgrade rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-hammer_cliUpgrade rubygem-unf_ext-debugsourceUpgrade tfm-rubygem-unf_extUpgrade tfm-rubygem-hammer_cli_foremanUpgrade rubygem-unicode-debuginfoUpgrade rubygem-unicodeUpgrade tfm-rubygem-unicode-display_widthUpgrade rubygem-mime-types-dataUpgrade tfm-rubygem-powerbarUpgrade rubygem-unfUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade rubygem-unicode-debugsourceUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade satelliteUpgrade rubygem-jwtUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-clampUpgrade rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-clampUpgrade rubygem-little-pluggerUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foremanUpgrade tfm-rubygem-multi_jsonUpgrade rubygem-netrcUpgrade satellite-maintainUpgrade satellite-brandingUpgrade rubygem-hammer_cli_katelloUpgrade tfm-rubygem-rest-clientUpgrade rubygem-unicode-display_width | Jul 14, 2022 | Dec 8, 2021 |
| Rocky_linux | — | Upgrade libdb-cxx-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-utils-debuginfoUpgrade libdb-cxxUpgrade libdb-debugsourceUpgrade libdb-debuginfo | Mar 12, 2024 | Dec 8, 2021 |
| Suse | — | Upgrade python3-django | Aug 9, 2024 | Dec 8, 2021 |
| Ubuntu | — | Upgrade python3-django | Mar 22, 2023 | Dec 8, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub