Skip to content
OpenAdvisories
High DLA-706-1 1 CVE

python-django - security update

Published Nov 14, 2016 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 7 python-django 1.4.22-1+deb7u2

Vulnerabilities 1

  • High 8.1
    CVE-2016-9014

    Django DNS Rebinding Vulnerability

    Django before 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3, when settings.DEBUG is True, allow remote attackers to conduct DNS rebinding attacks by leveraging failure to validate the HTTP Host header against settings.ALLOWED_HOSTS.

    python-django django python-django py3-django Debian Ubuntu Alpine PyPI