High DLA-649-1 1 CVE

python-django - security update

Published Oct 6, 2016 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 7	python-django	1.4.22-1+deb7u1

Vulnerabilities 1

High 7.5

CVE-2016-7401

Django CSRF Protection Bypass

The cookie parsing code in Django before 1.8.15 and 1.9.x before 1.9.10, when used on a site with Google Analytics, allows remote attackers to bypass an intended CSRF protection mechanism by setting arbitrary cookies.

python-django django python-django Debian Ubuntu PyPI

Oct 3, 2016