Description
django-nopassword before 5.0.0 stores cleartext secrets in the database.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | django-nopassword | < 5.0.0 | 5.0.0 | GHSA-37cf-r3w2-gjfw |
High · 7.5
CVE-2019-10682
EUVD-2020-0064GHSA-37cf-r3w2-gjfwPYSEC-2020-229
django-nopassword stores secrets in cleartext
Published Mar 18, 2020 · Updated Aug 4, 2024 · Assigned by mitre