Skip to content
OpenAdvisories
Low DLA-349-1 1 CVE

python-django - security update

Published Nov 25, 2015 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 python-django 1.2.3-3+squeeze15

Vulnerabilities 1

  • Low 2.8

    Django settings leak in date template filter

    The get_format function in utils/formats.py in Django before 1.7.x before 1.7.11, 1.8.x before 1.8.7, and 1.9.x before 1.9rc2 might allow remote attackers to obtain sensitive application secrets via a settings key in place of a date/time format setting, as de…