FreshPorts - VuXML

SO-AND-SO reports:

CVE-2022-34265: Potential SQL injection via Trunc(kind) and Extract(lookup_name) arguments.

< 3.2.14

< 4.0.6

Django reports:

CVE-2022-36359: Potential reflected file download vulnerability in FileResponse.

< 3.2.15

< 4.0.7

Django reports:

CVE-2022-41323: Potential denial-of-service vulnerability in internationalized URLs.

< 3.2.16

< 4.0.8

< 4.1.2

Django reports:

CVE-2023-23969: Potential denial-of-service via Accept-Language headers.

< 3.2.17

< 4.0.9

< 4.1.6

Django reports:

CVE-2023-24580: Potential denial-of-service vulnerability in file uploads.

< 3.2.18

< 4.0.10

< 4.1.7

Django reports:

CVE-2023-31047: Potential bypass of validation when uploading multiple files using one form field.

< 3.2.19

< 4.1.9

< 4.2.1

Django reports:

CVE-2023-41164: Potential denial of service vulnerability in django.utils.encoding.uri_to_iri().

< 3.2.21

< 4.1.11

< 4.2.5

Django reports:

CVE-2023-36053: Potential regular expression denial of service vulnerability in EmailValidator/URLValidator.

< 3.2.20

< 4.1.10

< 4.2.3