High DLA-206-1 1 CVE

django-markupfield - security update

Published Apr 20, 2015 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 6.0	django-markupfield	1.0.0a2-1+deb6u1

Vulnerabilities 1

High 7.5

CVE-2015-0846

django-markupfield Arbitrary File Read

django-markupfield before 1.3.2 uses the default docutils RESTRUCTUREDTEXT_FILTER_SETTINGS settings, which allows remote attackers to include and read arbitrary files via unspecified vectors.

django-markupfield django-markupfield Debian PyPI

Apr 24, 2015