Skip to content
OpenAdvisories

Package · Debian

django-anymail

2 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.4

    django-anymail Includes Sensitive Information in Log Files

    Anymail django-anymail version version 0.2 through 1.3 contains a CWE-532, CWE-209 vulnerability in WEBHOOK_AUTHORIZATION setting value that can result in An attacker with access to error logs could fabricate email tracking events. This attack appear to be ex…