Skip to content
OpenAdvisories

Package · Debian

django-haystack

1 known vulnerabilities.

1 result · Feed

  • Medium 4.7

    django-haystack more_like_this Template Tag elasticsearch_backend.py _to_python eval injection

    A vulnerability has been found in django-haystack up to 3.3.0. Affected is the function _to_python of the file haystack/backends/elasticsearch_backend.py of the component more_like_this Template Tag Handler. Such manipulation of the argument result_class lead…