| Package | Affected versions | Patched versions |
|---|---|---|
| django | ≥ 2.2, < 2.2.27≥ 3.2, < 3.2.12≥ 4.0, < 4.0.2 | 2.2.273.2.124.0.2 |
| django | ≥ 2.2, < 2.2.27≥ 3.2, < 3.2.12≥ 4.0, < 4.0.2 | 2.2.273.2.124.0.2 |
The {% debug %} template tag in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2 does not properly encode the current context. This may lead to XSS.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free