Skip to content
OpenAdvisories
Medium DLA-1842-1 1 CVE

python-django - security update

Published Jul 1, 2019 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 python-django 1.7.11-1+deb8u6

Vulnerabilities 1

  • Medium 5.3
    CVE-2019-12781

    Django Incorrect HTTP detection with reverse-proxy connecting via HTTPS

    An issue was discovered in Django 1.11 before 1.11.22, 2.1 before 2.1.10, and 2.2 before 2.2.3. An HTTP request is not redirected to HTTPS when the SECURE_PROXY_SSL_HEADER and SECURE_SSL_REDIRECT settings are used, and the proxy connects to Django via HTTPS. …

    python-django django python-django py3-django Debian Ubuntu Alpine PyPI