Skip to content
OpenAdvisories
Medium RHSA-2021:0933 1 CVE

Red Hat Security Advisory: python-django security update

Published Sep 18, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · OpenStack 13 openstack:13::el7 python-django 0:1.11.27-3.el7ost
Red Hat · OpenStack 13 openstack:13::el7 python-django-bash-completion 0:1.11.27-3.el7ost
Red Hat · OpenStack 13 openstack:13::el7 python2-django 0:1.11.27-3.el7ost

Vulnerabilities 1

  • Medium 5.9
    CVE-2020-13254 Public exploit

    Data leakage via cache key collision in Django

    An issue was discovered in Django 2.2 before 2.2.13 and 3.0 before 3.0.7. In cases where a memcached backend does not perform key validation, passing malformed cache keys could result in a key collision, and potential data leakage.

    python-django django python-django py3-django Debian Ubuntu Alpine PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1843614
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1930741
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0933.json
  • report
    https://access.redhat.com/security/cve/CVE-2020-13254
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-13254
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-13254
  • article
    https://www.djangoproject.com/weblog/2020/jun/03/security-releases