Skip to content
OpenAdvisories
Critical DSA-4107-1 1 CVE

django-anymail - security update

Published Feb 7, 2018 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 9 django-anymail 0.8-2+deb9u1

Vulnerabilities 1

  • Critical 9.1
    CVE-2018-6596

    Django-Anymail prone to a timing attack

    webhooks/base.py in Anymail (aka django-anymail) before 1.2.1 is prone to a timing attack vulnerability on the WEBHOOK_AUTHORIZATION secret, which allows remote attackers to post arbitrary e-mail tracking events.

    django-anymail django-anymail Debian PyPI