CVE catalog

CVE-2021-23336

The package python/cpython from 0 and before 3.6.13, from 3.7.0 and before 3.7.10, from 3.8.0 and before 3.8.8, from 3.9.0 and before 3.9.2 are vulnerable to Web Cache Poisoning via urllib.parse.parse

[CVE catalog]

Severity
Medium · CVSS 5.9CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
40.74% · Oct 25, 2026

The package python/cpython from 0 and before 3.6.13, from 3.7.0 and before 3.7.10, from 3.8.0 and before 3.8.8, from 3.9.0 and before 3.9.2 are vulnerable to Web Cache Poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a vector called parameter cloaking. When the attacker can separate query parameters using a semicolon (;), they can cause a difference in the interpretation of the request between the proxy (running with default configuration) and the server. This can result in malicious requests being cached as completely safe ones, as the proxy would usually not see the semicolon as a separator, and therefore would not include it in a cache key of an unkeyed parameter.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianpypy3sid8.0.1+dfsg-1fixed
Debianpypy3forky8.0.1+dfsg-1fixed
Debianpypy3trixie7.3.19+dfsg-2fixed
Debianpypy3bookworm7.3.11+dfsg-2+deb12u3fixed
Debianpython-djangosid3:5.2.18-1fixed
Debianpython-djangoforky3:5.2.17-2fixed
Debianpython-djangotrixie3:4.2.28-0+deb13u2fixed
Debianpython-djangotrixie-security3:4.2.28-0+deb13u1fixed
Debianpython-djangobookworm3:3.2.25-0+deb12u3fixed
Debianpython-djangobookworm-security3:3.2.25-0+deb12u6fixed
CpepythonNot reported3.6.13fixed
CpepythonNot reported3.7.10fixed
CpepythonNot reported3.8.8fixed
CpepythonNot reported3.9.2fixed
CpefedoraNot reportedNot reportedunknown
CpefedoraNot reportedNot reportedunknown
CpefedoraNot reportedNot reportedunknown
Cpedebian_linuxNot reportedNot reportedunknown
Cpecloud_backupNot reportedNot reportedunknown
Cpeinventory_collect_toolNot reportedNot reportedunknown
Cpeontap_select_deploy_administration_utilityNot reportedNot reportedunknown
CpesnapcenterNot reportedNot reportedunknown
CpedjangoNot reported2.2.19fixed
CpedjangoNot reported3.0.13fixed
CpedjangoNot reported3.1.7fixed
Cpecommunications_offline_mediation_controllerNot reportedNot reportedunknown
Cpecommunications_pricing_design_centerNot reportedNot reportedunknown
Cpeenterprise_manager_ops_centerNot reportedNot reportedunknown
Cpezfs_storage_applianceNot reportedNot reportedunknown
Opensusepython-w3libtumbleweed2.5.0-1.1fixed
Ubuntupython2.7pro2.7.17~rc1-1vulnerable
Ubuntupython2.7pro2.7.17-1vulnerable
Ubuntupython2.7pro2.7.17-1ubuntu5vulnerable
Ubuntupython2.7pro2.7.17-1ubuntu6vulnerable
Ubuntupython2.7pro2.7.18~rc1-2vulnerable
Ubuntupython2.7pro2.7.18-1~20.04vulnerable
Ubuntupython2.7pro2.7.18-1~20.04.1vulnerable
Ubuntupython2.7pro2.7.18-1~20.04.1+esm1vulnerable
Ubuntupython2.7pro2.7.18-1~20.04.3vulnerable
Ubuntupython2.7pro2.7.18-1~20.04.3+esm1vulnerable
Ubuntupython2.7pro2.7.18-1~20.04.4vulnerable
Ubuntupython2.7pro2.7.18-1~20.04.4+esm1vulnerable
Ubuntupython2.7pro2.7.18-1~20.04.4+esm2vulnerable
Ubuntupython2.7pro2.7.18-1~20.04.4+esm3vulnerable
Ubuntupython2.7pro2.7.18-1~20.04.5vulnerable
Ubuntupython2.7pro2.7.18-1~20.04.5+esm1vulnerable
Ubuntupython2.7pro2.7.18-1~20.04.5+esm2vulnerable
Ubuntupython2.7pro2.7.18-1~20.04.6vulnerable
Ubuntupython2.7pro2.7.18-1~20.04.6+esm1vulnerable
Ubuntupython2.7pro2.7.18-1~20.04.7vulnerable
Ubuntupython2.7pro2.7.18-1~20.04.7+esm3vulnerable
Ubuntupython2.7pro2.7.18-1~20.04.7+esm4vulnerable
Ubuntupython2.7pro2.7.18-1~20.04.7+esm6vulnerable
Ubuntupython2.7pro2.7.18-1~20.04.7+esm7vulnerable
Ubuntupython2.7pro2.7.18-1~20.04.7+esm8vulnerable
Ubuntupython2.7pro2.7.18-1~20.04.7+esm9vulnerable
Ubuntupython2.7pro2.7.18-1~20.04.7+esm10vulnerable
Ubuntupython3.4pro3.4~b1-0ubuntu3vulnerable
Ubuntupython3.4pro3.4~b1-4ubuntu4vulnerable
Ubuntupython3.4pro3.4~b1-4ubuntu6vulnerable
Ubuntupython3.4pro3.4~b1-5ubuntu2vulnerable
Ubuntupython3.4pro3.4~b2-1vulnerable
Ubuntupython3.4pro3.4~b3-1ubuntu1vulnerable
Ubuntupython3.4pro3.4~rc1-1build1vulnerable
Ubuntupython3.4pro3.4~rc2-1vulnerable
Ubuntupython3.4pro3.4~rc3-0ubuntu1vulnerable
Ubuntupython3.4pro3.4.0-1vulnerable
Ubuntupython3.4pro3.4.0-2ubuntu1vulnerable
Ubuntupython3.4pro3.4.0-2ubuntu1.1vulnerable
Ubuntupython3.4pro3.4.3-1ubuntu1~14.04.1vulnerable
Ubuntupython3.4pro3.4.3-1ubuntu1~14.04.3vulnerable
Ubuntupython3.4pro3.4.3-1ubuntu1~14.04.4vulnerable
Ubuntupython3.4pro3.4.3-1ubuntu1~14.04.5vulnerable
Ubuntupython3.4pro3.4.3-1ubuntu1~14.04.6vulnerable
Ubuntupython3.4pro3.4.3-1ubuntu1~14.04.7vulnerable
Ubuntupython3.4pro3.4.3-1ubuntu1~14.04.7+esm2vulnerable
Ubuntupython3.4pro3.4.3-1ubuntu1~14.04.7+esm4vulnerable
Ubuntupython3.4pro3.4.3-1ubuntu1~14.04.7+esm6vulnerable
Ubuntupython3.4pro3.4.3-1ubuntu1~14.04.7+esm7vulnerable
Ubuntupython3.4pro3.4.3-1ubuntu1~14.04.7+esm8vulnerable
Ubuntupython3.4pro3.4.3-1ubuntu1~14.04.7+esm10vulnerable
Ubuntupython3.4pro3.4.3-1ubuntu1~14.04.7+esm11vulnerable
Ubuntupython3.4pro3.4.3-1ubuntu1~14.04.7+esm12vulnerable
Ubuntupython3.4pro3.4.3-1ubuntu1~14.04.7+esm13vulnerable
Ubuntupython3.4pro3.4.3-1ubuntu1~14.04.7+esm14vulnerable
Ubuntupython3.4pro3.4.3-1ubuntu1~14.04.7+esm15vulnerable
Ubuntupython3.4pro3.4.3-1ubuntu1~14.04.7+esm16vulnerable
Ubuntupython3.4pro3.4.3-1ubuntu1~14.04.7+esm17vulnerable
Ubuntupython3.4pro3.4.3-1ubuntu1~14.04.7+esm19vulnerable
Ubuntupython3.4pro3.4.3-1ubuntu1~14.04.7+esm20vulnerable
Ubuntupython3.4pro3.4.3-1ubuntu1~14.04.7+esm21vulnerable
Ubuntupython3.5pro3.5.0-3vulnerable
Ubuntupython3.5pro3.5.0-3ubuntu1vulnerable
Ubuntupython3.5pro3.5.1~rc1-2ubuntu1vulnerable
Ubuntupython3.5pro3.5.1-1vulnerable
Ubuntupython3.5pro3.5.1-2vulnerable
Ubuntupython3.5pro3.5.1-3vulnerable
Ubuntupython3.5pro3.5.1-5vulnerable
Ubuntupython3.5pro3.5.1-6ubuntu1vulnerable
Ubuntupython3.5pro3.5.1-6ubuntu2vulnerable
Ubuntupython3.5pro3.5.1-9ubuntu1vulnerable
Ubuntupython3.5pro3.5.1-10vulnerable
Ubuntupython3.5pro3.5.2-2~16.01vulnerable
Ubuntupython3.5pro3.5.2-2~16.04vulnerable
Ubuntupython3.5pro3.5.2-2ubuntu0~16.04.1vulnerable
Ubuntupython3.5pro3.5.2-2ubuntu0~16.04.2vulnerable
Ubuntupython3.5pro3.5.2-2ubuntu0~16.04.3vulnerable
Ubuntupython3.5pro3.5.2-2ubuntu0~16.04.4vulnerable
Ubuntupython3.5pro3.5.2-2ubuntu0~16.04.5vulnerable
Ubuntupython3.5pro3.5.2-2ubuntu0~16.04.8vulnerable
Ubuntupython3.5pro3.5.2-2ubuntu0~16.04.9vulnerable
Ubuntupython3.5pro3.5.2-2ubuntu0~16.04.10vulnerable
Ubuntupython3.5pro3.5.2-2ubuntu0~16.04.11vulnerable
Ubuntupython3.5pro3.5.2-2ubuntu0~16.04.12vulnerable
Ubuntupython3.5pro3.5.2-2ubuntu0~16.04.13vulnerable
Ubuntupython3.5pro3.5.2-2ubuntu0~16.04.13+esm1vulnerable
Ubuntupython3.5pro3.5.2-2ubuntu0~16.04.13+esm2vulnerable
Ubuntupython3.5pro3.5.2-2ubuntu0~16.04.13+esm3vulnerable
Ubuntupython3.5pro3.5.2-2ubuntu0~16.04.13+esm5vulnerable
Ubuntupython3.5pro3.5.2-2ubuntu0~16.04.13+esm6vulnerable
Ubuntupython3.5pro3.5.2-2ubuntu0~16.04.13+esm7vulnerable
Ubuntupython3.5pro3.5.2-2ubuntu0~16.04.13+esm8vulnerable
Ubuntupython3.5pro3.5.2-2ubuntu0~16.04.13+esm9vulnerable
Ubuntupython3.5pro3.5.2-2ubuntu0~16.04.13+esm10vulnerable
Ubuntupython3.5pro3.5.2-2ubuntu0~16.04.13+esm11vulnerable
Ubuntupython3.5pro3.5.2-2ubuntu0~16.04.13+esm12vulnerable
Ubuntupython3.5pro3.5.2-2ubuntu0~16.04.13+esm13vulnerable
Ubuntupython3.5pro3.5.2-2ubuntu0~16.04.13+esm14vulnerable
Ubuntupython3.5pro3.5.2-2ubuntu0~16.04.13+esm15vulnerable
Ubuntupython3.5pro3.5.2-2ubuntu0~16.04.13+esm16vulnerable
Ubuntupython3.5pro3.5.2-2ubuntu0~16.04.13+esm17vulnerable
Ubuntupython3.5pro3.5.2-2ubuntu0~16.04.13+esm18vulnerable
Ubuntupython3.5pro3.5.2-2ubuntu0~16.04.13+esm19vulnerable
Ubuntupython3.5pro3.5.2-2ubuntu0~16.04.13+esm20vulnerable
Ubuntupython3.5pro3.5.2-2ubuntu0~16.04.13+esm21vulnerable
Ubuntupython3.5pro3.5.2-2ubuntu0~16.04.13+esm22vulnerable
Ubuntupython3.5pro3.5.2-2ubuntu0~16.04.13+esm23vulnerable
Ubuntupython3.5pro3.5.2-2ubuntu0~16.04.13+esm24vulnerable
Ubuntupython3.5pro3.5.2-2ubuntu0~16.04.13+esm25vulnerable
Ubuntupython-django18.041:1.11.4-1ubuntu1vulnerable
Ubuntupython-django18.041:1.11.6-1ubuntu1vulnerable
Ubuntupython-django18.041:1.11.9-1ubuntu1vulnerable
Ubuntupython-django18.041:1.11.11-1ubuntu1vulnerable
Ubuntupython-django18.041:1.11.11-1ubuntu1.1vulnerable
Ubuntupython-django18.041:1.11.11-1ubuntu1.2vulnerable
Ubuntupython-django18.041:1.11.11-1ubuntu1.3vulnerable
Ubuntupython-django18.041:1.11.11-1ubuntu1.4vulnerable
Ubuntupython-django18.041:1.11.11-1ubuntu1.5vulnerable
Ubuntupython-django18.041:1.11.11-1ubuntu1.6vulnerable
Ubuntupython-django18.041:1.11.11-1ubuntu1.7vulnerable
Ubuntupython-django18.041:1.11.11-1ubuntu1.8vulnerable
Ubuntupython-django18.041:1.11.11-1ubuntu1.9vulnerable
Ubuntupython-django18.041:1.11.11-1ubuntu1.10vulnerable
Ubuntupython-django18.041:1.11.11-1ubuntu1.11fixed
Ubuntupython3.6pro3.6.3-1ubuntu1vulnerable
Ubuntupython3.6pro3.6.4~rc1-1vulnerable
Ubuntupython3.6pro3.6.4~rc1-2vulnerable
Ubuntupython3.6pro3.6.4-1vulnerable
Ubuntupython3.6pro3.6.4-2vulnerable
Ubuntupython3.6pro3.6.4-3build1vulnerable
Ubuntupython3.6pro3.6.4-4vulnerable
Ubuntupython3.6pro3.6.5~rc1-1vulnerable
Ubuntupython3.6pro3.6.5-3vulnerable
Ubuntupython3.6pro3.6.6-1~18.04vulnerable
Ubuntupython3.6pro3.6.7-1~18.04vulnerable
Ubuntupython3.6pro3.6.8-1~18.04.1vulnerable
Ubuntupython3.6pro3.6.8-1~18.04.2vulnerable
Ubuntupython3.6pro3.6.8-1~18.04.3vulnerable
Ubuntupython3.6pro3.6.9-1~18.04vulnerable
Ubuntupython3.6pro3.6.9-1~18.04ubuntu1vulnerable
Ubuntupython3.6pro3.6.9-1~18.04ubuntu1.1vulnerable
Ubuntupython3.6pro3.6.9-1~18.04ubuntu1.3vulnerable
Ubuntupython3.6pro3.6.9-1~18.04ubuntu1.4vulnerable
Ubuntupython3.6pro3.6.9-1~18.04ubuntu1.6vulnerable
Ubuntupython3.6pro3.6.9-1~18.04ubuntu1.7vulnerable
Ubuntupython3.6pro3.6.9-1~18.04ubuntu1.8vulnerable
Ubuntupython3.6pro3.6.9-1~18.04ubuntu1.9vulnerable
Ubuntupython3.6pro3.6.9-1~18.04ubuntu1.10vulnerable
Ubuntupython3.6pro3.6.9-1~18.04ubuntu1.12vulnerable
Ubuntupython3.6pro3.6.9-1~18.04ubuntu1.13vulnerable
Ubuntupython3.6pro3.6.9-1~18.04ubuntu1.13+esm1vulnerable
Ubuntupython3.6pro3.6.9-1~18.04ubuntu1.13+esm2vulnerable
Ubuntupython3.6pro3.6.9-1~18.04ubuntu1.13+esm3vulnerable
Ubuntupython3.6pro3.6.9-1~18.04ubuntu1.13+esm4vulnerable
Ubuntupython3.6pro3.6.9-1~18.04ubuntu1.13+esm5vulnerable
Ubuntupython3.6pro3.6.9-1~18.04ubuntu1.13+esm6vulnerable
Ubuntupython3.6pro3.6.9-1~18.04ubuntu1.13+esm7vulnerable
Ubuntupython3.6pro3.6.9-1~18.04ubuntu1.13+esm8vulnerable
Ubuntupython3.6pro3.6.9-1~18.04ubuntu1.13+esm9vulnerable
Ubuntupython3.6pro3.6.9-1~18.04ubuntu1.13+esm10vulnerable
Ubuntupython3.7pro3.7.0~a2-1vulnerable
Ubuntupython3.7pro3.7.0~a3-1vulnerable
Ubuntupython3.7pro3.7.0~a3-2vulnerable
Ubuntupython3.7pro3.7.0~a3-3vulnerable
Ubuntupython3.7pro3.7.0~a4-1vulnerable
Ubuntupython3.7pro3.7.0~b1-1vulnerable
Ubuntupython3.7pro3.7.0~b1-1build1vulnerable
Ubuntupython3.7pro3.7.0~b2-1vulnerable
Ubuntupython3.7pro3.7.0~b3-1vulnerable
Ubuntupython3.7pro3.7.0-1~18.04vulnerable
Ubuntupython3.7pro3.7.1-1~18.04vulnerable
Ubuntupython3.7pro3.7.3-2~18.04.1vulnerable
Ubuntupython3.7pro3.7.5-2~18.04vulnerable
Ubuntupython3.7pro3.7.5-2~18.04.4vulnerable
Ubuntupython3.7pro3.7.5-2ubuntu1~18.04.2vulnerable
Ubuntupython3.7pro3.7.5-2ubuntu1~18.04.2+esm1vulnerable
Ubuntupython3.7pro3.7.5-2ubuntu1~18.04.2+esm2vulnerable
Ubuntupython3.7pro3.7.5-2ubuntu1~18.04.2+esm3vulnerable
Ubuntupython3.7pro3.7.5-2ubuntu1~18.04.2+esm4vulnerable
Ubuntupython3.7pro3.7.5-2ubuntu1~18.04.2+esm5vulnerable
Ubuntupython3.7pro3.7.5-2ubuntu1~18.04.2+esm6vulnerable
Ubuntupython3.7pro3.7.5-2ubuntu1~18.04.2+esm7vulnerable
Ubuntupython3.7pro3.7.5-2ubuntu1~18.04.2+esm8vulnerable
Ubuntupython3.7pro3.7.5-2ubuntu1~18.04.2+esm9vulnerable
Ubuntupython3.7pro3.7.5-2ubuntu1~18.04.2+esm10vulnerable
Ubuntupython3.7pro3.7.5-2ubuntu1~18.04.2+esm11vulnerable
Ubuntupython3.8pro3.8.0-1vulnerable
Ubuntupython3.8pro3.8.0-2vulnerable
Ubuntupython3.8pro3.8.0-3vulnerable
Ubuntupython3.8pro3.8.0-4vulnerable
Ubuntupython3.8pro3.8.0-5vulnerable
Ubuntupython3.8pro3.8.1-2ubuntu3vulnerable
Ubuntupython3.8pro3.8.2~rc1-1ubuntu1vulnerable
Ubuntupython3.8pro3.8.2-1vulnerable
Ubuntupython3.8pro3.8.2-1ubuntu1vulnerable
Ubuntupython3.8pro3.8.2-1ubuntu1.1vulnerable
Ubuntupython3.8pro3.8.2-1ubuntu1.2vulnerable
Ubuntupython3.8pro3.8.5-1~20.04vulnerable
Ubuntupython3.8pro3.8.5-1~20.04.2vulnerable
Ubuntupython3.8pro3.8.5-1~20.04.3vulnerable
Ubuntupython3.8pro3.8.10-0ubuntu1~20.04vulnerable
Ubuntupython3.8pro3.8.10-0ubuntu1~20.04.1vulnerable
Ubuntupython3.8pro3.8.10-0ubuntu1~20.04.2vulnerable
Ubuntupython3.8pro3.8.10-0ubuntu1~20.04.4vulnerable
Ubuntupython3.8pro3.8.10-0ubuntu1~20.04.5vulnerable
Ubuntupython3.8pro3.8.10-0ubuntu1~20.04.6vulnerable
Ubuntupython3.8pro3.8.10-0ubuntu1~20.04.7vulnerable
Ubuntupython3.8pro3.8.10-0ubuntu1~20.04.8vulnerable
Ubuntupython3.8pro3.8.10-0ubuntu1~20.04.9vulnerable
Ubuntupython3.8pro3.8.10-0ubuntu1~20.04.10vulnerable
Ubuntupython3.8pro3.8.10-0ubuntu1~20.04.11vulnerable
Ubuntupython3.8pro3.8.10-0ubuntu1~20.04.12vulnerable
Ubuntupython3.8pro3.8.10-0ubuntu1~20.04.13vulnerable
Ubuntupython3.8pro3.8.10-0ubuntu1~20.04.14vulnerable
Ubuntupython3.8pro3.8.10-0ubuntu1~20.04.15vulnerable
Ubuntupython3.8pro3.8.10-0ubuntu1~20.04.16vulnerable
Ubuntupython3.8pro3.8.10-0ubuntu1~20.04.17vulnerable
Ubuntupython3.8pro3.8.10-0ubuntu1~20.04.18vulnerable
Ubuntupython3.8pro3.8.10-0ubuntu1~20.04.18+esm1vulnerable
Ubuntupython3.8pro3.8.10-0ubuntu1~20.04.18+esm2vulnerable
Ubuntupython3.8pro3.8.10-0ubuntu1~20.04.18+esm3vulnerable
Ubuntupython3.8pro3.8.10-0ubuntu1~20.04.18+esm4vulnerable
Ubuntupython3.8pro3.8.10-0ubuntu1~20.04.18+esm5vulnerable
Ubuntupython3.8pro3.8.10-0ubuntu1~20.04.18+esm6vulnerable
Ubuntupython3.8pro3.8.10-0ubuntu1~20.04.18+esm7vulnerable
Ubuntupython-django20.041:1.11.22-1ubuntu1vulnerable
Ubuntupython-django20.042:2.2.6-1ubuntu1vulnerable
Ubuntupython-django20.042:2.2.9-2ubuntu1vulnerable
Ubuntupython-django20.042:2.2.10-1vulnerable
Ubuntupython-django20.042:2.2.10-1ubuntu1vulnerable
Ubuntupython-django20.042:2.2.11-1vulnerable
Ubuntupython-django20.042:2.2.12-1vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.1vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.2vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.3vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.4fixed
Ubuntupython3.920.043.9.0~rc1-1~20.04vulnerable
Ubuntupython3.920.043.9.0-5~20.04vulnerable
Ubuntupython3.920.043.9.5-3~20.04.1fixed
Ubuntupython2.722.042.7.18-8build1vulnerable
Ubuntupython2.722.042.7.18-13vulnerable
Ubuntupython2.722.042.7.18-13ubuntu1vulnerable
Ubuntupython2.722.042.7.18-13ubuntu1.1vulnerable
Ubuntupython2.722.042.7.18-13ubuntu1.2vulnerable
Ubuntupython2.722.042.7.18-13ubuntu1.3vulnerable
Ubuntupython2.722.042.7.18-13ubuntu1.4vulnerable
Ubuntupython2.722.042.7.18-13ubuntu1.5vulnerable
Alpinepython33.123.8.8-r0fixed
Alpinepython33.133.8.8-r0fixed
Alpinepython33.143.8.8-r0fixed
Alpinepython33.153.8.8-r0fixed
Alpinepython33.163.8.8-r0fixed
Alpinepython33.173.8.8-r0fixed
Alpinepython33.183.8.8-r0fixed
Alpinepython33.193.8.8-r0fixed
Alpinepython33.203.8.8-r0fixed
Alpinepython33.213.8.8-r0fixed
Alpinepython33.223.8.8-r0fixed
Alpinepython33.233.8.8-r0fixed
Alpinepython33.243.8.8-r0fixed
Opensusepython-yarltumbleweed1.24.5-1.1fixed
Ubuntupython-django18.041:1.11.4-1ubuntu1vulnerable
Ubuntupython-django18.041:1.11.6-1ubuntu1vulnerable
Ubuntupython-django18.041:1.11.9-1ubuntu1vulnerable
Ubuntupython-django18.041:1.11.11-1ubuntu1vulnerable
Ubuntupython-django18.041:1.11.11-1ubuntu1.1vulnerable
Ubuntupython-django18.041:1.11.11-1ubuntu1.2vulnerable
Ubuntupython-django18.041:1.11.11-1ubuntu1.3vulnerable
Ubuntupython-django18.041:1.11.11-1ubuntu1.4vulnerable
Ubuntupython-django18.041:1.11.11-1ubuntu1.5vulnerable
Ubuntupython-django18.041:1.11.11-1ubuntu1.6vulnerable
Ubuntupython-django18.041:1.11.11-1ubuntu1.7vulnerable
Ubuntupython-django18.041:1.11.11-1ubuntu1.8vulnerable
Ubuntupython-django18.041:1.11.11-1ubuntu1.9vulnerable
Ubuntupython-django18.041:1.11.11-1ubuntu1.10vulnerable
Ubuntupython-django18.041:1.11.11-1ubuntu1.11fixed
Ubuntupython-django20.041:1.11.22-1ubuntu1vulnerable
Ubuntupython-django20.042:2.2.6-1ubuntu1vulnerable
Ubuntupython-django20.042:2.2.9-2ubuntu1vulnerable
Ubuntupython-django20.042:2.2.10-1vulnerable
Ubuntupython-django20.042:2.2.10-1ubuntu1vulnerable
Ubuntupython-django20.042:2.2.11-1vulnerable
Ubuntupython-django20.042:2.2.12-1vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.1vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.2vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.3vulnerable
Ubuntupython-django20.042:2.2.12-1ubuntu0.4fixed
Susepython36linux enterprise server 12 sp53.6.13-4.36.1fixed
Susepython36-corelinux enterprise server 12 sp53.6.13-4.36.1fixed
Susepython36linux enterprise server for sap applications 12 sp53.6.13-4.36.1fixed
Susepython36-corelinux enterprise server for sap applications 12 sp53.6.13-4.36.1fixed
Opensusepython-w3libtumbleweed1.22.0-2.4fixed
Susepythonlinux enterprise module for basesystem 15 sp22.7.18-7.55.1fixed
Susepython-baselinux enterprise module for basesystem 15 sp22.7.18-7.55.1fixed
Susepythonlinux enterprise module for desktop applications 15 sp22.7.18-7.55.1fixed
Susepythonlinux enterprise module for python 2 15 sp22.7.18-7.55.1fixed
Susepython-baselinux enterprise module for python 2 15 sp22.7.18-7.55.1fixed
Susepythonlinux enterprise high performance computing 15-espos2.7.18-7.55.1fixed
Susepython-baselinux enterprise high performance computing 15-espos2.7.18-7.55.1fixed
Susepythonlinux enterprise high performance computing 15-ltss2.7.18-7.55.1fixed
Susepython-baselinux enterprise high performance computing 15-ltss2.7.18-7.55.1fixed
Susepythonlinux enterprise high performance computing 15 sp1-espos2.7.18-7.55.1fixed
Susepython-baselinux enterprise high performance computing 15 sp1-espos2.7.18-7.55.1fixed
Susepythonlinux enterprise high performance computing 15 sp1-ltss2.7.18-7.55.1fixed
Susepython-baselinux enterprise high performance computing 15 sp1-ltss2.7.18-7.55.1fixed
Susepythonlinux enterprise server 15-ltss2.7.18-7.55.1fixed
Susepython-baselinux enterprise server 15-ltss2.7.18-7.55.1fixed
Susepythonlinux enterprise server 15 sp1-bcl2.7.18-7.55.1fixed
Susepython-baselinux enterprise server 15 sp1-bcl2.7.18-7.55.1fixed
Susepythonlinux enterprise server 15 sp1-ltss2.7.18-7.55.1fixed
Susepython-baselinux enterprise server 15 sp1-ltss2.7.18-7.55.1fixed
Susepythonlinux enterprise server for sap applications 152.7.18-7.55.1fixed
Susepython-baselinux enterprise server for sap applications 152.7.18-7.55.1fixed
Susepythonlinux enterprise server for sap applications 15 sp12.7.18-7.55.1fixed
Susepython-baselinux enterprise server for sap applications 15 sp12.7.18-7.55.1fixed
Susepythonmanager proxy 4.02.7.18-7.55.1fixed
Susepython-basemanager proxy 4.02.7.18-7.55.1fixed
Susepythonmanager retail branch server 4.02.7.18-7.55.1fixed
Susepython-basemanager retail branch server 4.02.7.18-7.55.1fixed
Susepythonmanager server 4.02.7.18-7.55.1fixed
Susepython-basemanager server 4.02.7.18-7.55.1fixed
Susepythonenterprise storage 62.7.18-7.55.1fixed
Susepython-baseenterprise storage 62.7.18-7.55.1fixed
Susepython3linux enterprise module for web and scripting 123.4.10-25.66.1fixed
Susepython3-baselinux enterprise module for web and scripting 123.4.10-25.66.1fixed
Susepython3linux enterprise software development kit 12 sp53.4.10-25.66.1fixed
Susepython3-baselinux enterprise software development kit 12 sp53.4.10-25.66.1fixed
Susepython3linux enterprise server 12 sp53.4.10-25.66.1fixed
Susepython3-baselinux enterprise server 12 sp53.4.10-25.66.1fixed
Susepython3linux enterprise server for sap applications 12 sp53.4.10-25.66.1fixed
Susepython3-baselinux enterprise server for sap applications 12 sp53.4.10-25.66.1fixed
Opensusepython-w3libtumbleweed2.2.0-1.1fixed
Susepython3linux enterprise module for basesystem 15 sp23.6.13-3.78.1fixed
Susepython3-corelinux enterprise module for basesystem 15 sp23.6.13-3.78.1fixed
Susepython3-corelinux enterprise module for development tools 15 sp23.6.13-3.78.1fixed
Susepython3linux enterprise micro 5.03.6.13-3.78.1fixed
Susepython3-corelinux enterprise micro 5.03.6.13-3.78.1fixed
Opensusepythonleap 15.22.7.18-lp152.3.15.1fixed
Opensusepython-baseleap 15.22.7.18-lp152.3.15.1fixed
Opensusepython-docleap 15.22.7.18-lp152.3.15.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianpypy3sourcesid7.3.3+dfsg-3not yet assignedNot reportedNot reported
Debianpypy3sourceforky7.3.3+dfsg-3not yet assignedNot reportedNot reported
Debianpypy3sourcetrixie7.3.3+dfsg-3not yet assignedNot reportedNot reported
Debianpypy3sourcebookworm7.3.3+dfsg-3not yet assignedNot reportedNot reported
Debianpython-djangosourcesid2:2.2.19-1not yet assignedNot reported[983090]
Debianpython-djangosourceforky2:2.2.19-1not yet assignedNot reported[983090]
Debianpython-djangosourcetrixie2:2.2.19-1not yet assignedNot reported[983090]
Debianpython-djangosourcebookworm2:2.2.19-1not yet assignedNot reported[983090]
CpepythoncpeNot reported3.6.13Not reportedNVD-CVE-2021-23336Not reported
CpepythoncpeNot reported3.7.10Not reportedNVD-CVE-2021-23336Not reported
CpepythoncpeNot reported3.8.8Not reportedNVD-CVE-2021-23336Not reported
CpepythoncpeNot reported3.9.2Not reportedNVD-CVE-2021-23336Not reported
CpedjangocpeNot reported2.2.19Not reportedNVD-CVE-2021-23336Not reported
CpedjangocpeNot reported3.0.13Not reportedNVD-CVE-2021-23336Not reported
CpedjangocpeNot reported3.1.7Not reportedNVD-CVE-2021-23336Not reported
Opensusepython-w3librpmtumbleweed2.5.0-1.1Not reportedOPENSUSE-SU-2026:11948-1Not reported
Ubuntupython-djangodeb18.041:1.11.11-1ubuntu1.11Not reportedUBUNTU-CVE-2021-23336Not reported
Ubuntupython-djangodeb20.042:2.2.12-1ubuntu0.4Not reportedUBUNTU-CVE-2021-23336Not reported
Ubuntupython3.9deb20.043.9.5-3~20.04.1Not reportedUBUNTU-CVE-2021-23336Not reported
Alpinepython3apk3.123.8.8-r0Not reportedALPINE-CVE-2021-23336Not reported
Alpinepython3apk3.133.8.8-r0Not reportedALPINE-CVE-2021-23336Not reported
Alpinepython3apk3.143.8.8-r0Not reportedALPINE-CVE-2021-23336Not reported
Alpinepython3apk3.153.8.8-r0Not reportedALPINE-CVE-2021-23336Not reported
Alpinepython3apk3.163.8.8-r0Not reportedALPINE-CVE-2021-23336Not reported
Alpinepython3apk3.173.8.8-r0Not reportedALPINE-CVE-2021-23336Not reported
Alpinepython3apk3.183.8.8-r0Not reportedALPINE-CVE-2021-23336Not reported
Alpinepython3apk3.193.8.8-r0Not reportedALPINE-CVE-2021-23336Not reported
Alpinepython3apk3.203.8.8-r0Not reportedALPINE-CVE-2021-23336Not reported
Alpinepython3apk3.213.8.8-r0Not reportedALPINE-CVE-2021-23336Not reported
Alpinepython3apk3.223.8.8-r0Not reportedALPINE-CVE-2021-23336Not reported
Alpinepython3apk3.233.8.8-r0Not reportedALPINE-CVE-2021-23336Not reported
Alpinepython3apk3.243.8.8-r0Not reportedALPINE-CVE-2021-23336Not reported
Opensusepython-yarlrpmtumbleweed1.24.5-1.1Not reportedOPENSUSE-SU-2026:11589-1Not reported
Ubuntupython-djangodeb18.041:1.11.11-1ubuntu1.11Not reportedUSN-4742-1Not reported
Ubuntupython-djangodeb20.042:2.2.12-1ubuntu0.4Not reportedUSN-4742-1Not reported
Susepython36rpmlinux enterprise server 12 sp53.6.13-4.36.1Not reportedSUSE-SU-2021:0887-1Not reported
Susepython36-corerpmlinux enterprise server 12 sp53.6.13-4.36.1Not reportedSUSE-SU-2021:0887-1Not reported
Susepython36rpmlinux enterprise server for sap applications 12 sp53.6.13-4.36.1Not reportedSUSE-SU-2021:0887-1Not reported
Susepython36-corerpmlinux enterprise server for sap applications 12 sp53.6.13-4.36.1Not reportedSUSE-SU-2021:0887-1Not reported
Opensusepython-w3librpmtumbleweed1.22.0-2.4Not reportedOPENSUSE-SU-2024:11279-1Not reported
Susepythonrpmlinux enterprise module for basesystem 15 sp22.7.18-7.55.1Not reportedSUSE-SU-2021:0768-1Not reported
Susepython-baserpmlinux enterprise module for basesystem 15 sp22.7.18-7.55.1Not reportedSUSE-SU-2021:0768-1Not reported
Susepythonrpmlinux enterprise module for desktop applications 15 sp22.7.18-7.55.1Not reportedSUSE-SU-2021:0768-1Not reported
Susepythonrpmlinux enterprise module for python 2 15 sp22.7.18-7.55.1Not reportedSUSE-SU-2021:0768-1Not reported
Susepython-baserpmlinux enterprise module for python 2 15 sp22.7.18-7.55.1Not reportedSUSE-SU-2021:0768-1Not reported
Susepythonrpmlinux enterprise high performance computing 15-espos2.7.18-7.55.1Not reportedSUSE-SU-2021:0768-1Not reported
Susepython-baserpmlinux enterprise high performance computing 15-espos2.7.18-7.55.1Not reportedSUSE-SU-2021:0768-1Not reported
Susepythonrpmlinux enterprise high performance computing 15-ltss2.7.18-7.55.1Not reportedSUSE-SU-2021:0768-1Not reported
Susepython-baserpmlinux enterprise high performance computing 15-ltss2.7.18-7.55.1Not reportedSUSE-SU-2021:0768-1Not reported
Susepythonrpmlinux enterprise high performance computing 15 sp1-espos2.7.18-7.55.1Not reportedSUSE-SU-2021:0768-1Not reported
Susepython-baserpmlinux enterprise high performance computing 15 sp1-espos2.7.18-7.55.1Not reportedSUSE-SU-2021:0768-1Not reported
Susepythonrpmlinux enterprise high performance computing 15 sp1-ltss2.7.18-7.55.1Not reportedSUSE-SU-2021:0768-1Not reported
Susepython-baserpmlinux enterprise high performance computing 15 sp1-ltss2.7.18-7.55.1Not reportedSUSE-SU-2021:0768-1Not reported
Susepythonrpmlinux enterprise server 15-ltss2.7.18-7.55.1Not reportedSUSE-SU-2021:0768-1Not reported
Susepython-baserpmlinux enterprise server 15-ltss2.7.18-7.55.1Not reportedSUSE-SU-2021:0768-1Not reported
Susepythonrpmlinux enterprise server 15 sp1-bcl2.7.18-7.55.1Not reportedSUSE-SU-2021:0768-1Not reported
Susepython-baserpmlinux enterprise server 15 sp1-bcl2.7.18-7.55.1Not reportedSUSE-SU-2021:0768-1Not reported
Susepythonrpmlinux enterprise server 15 sp1-ltss2.7.18-7.55.1Not reportedSUSE-SU-2021:0768-1Not reported
Susepython-baserpmlinux enterprise server 15 sp1-ltss2.7.18-7.55.1Not reportedSUSE-SU-2021:0768-1Not reported
Susepythonrpmlinux enterprise server for sap applications 152.7.18-7.55.1Not reportedSUSE-SU-2021:0768-1Not reported
Susepython-baserpmlinux enterprise server for sap applications 152.7.18-7.55.1Not reportedSUSE-SU-2021:0768-1Not reported
Susepythonrpmlinux enterprise server for sap applications 15 sp12.7.18-7.55.1Not reportedSUSE-SU-2021:0768-1Not reported
Susepython-baserpmlinux enterprise server for sap applications 15 sp12.7.18-7.55.1Not reportedSUSE-SU-2021:0768-1Not reported
Susepythonrpmmanager proxy 4.02.7.18-7.55.1Not reportedSUSE-SU-2021:0768-1Not reported
Susepython-baserpmmanager proxy 4.02.7.18-7.55.1Not reportedSUSE-SU-2021:0768-1Not reported
Susepythonrpmmanager retail branch server 4.02.7.18-7.55.1Not reportedSUSE-SU-2021:0768-1Not reported
Susepython-baserpmmanager retail branch server 4.02.7.18-7.55.1Not reportedSUSE-SU-2021:0768-1Not reported
Susepythonrpmmanager server 4.02.7.18-7.55.1Not reportedSUSE-SU-2021:0768-1Not reported
Susepython-baserpmmanager server 4.02.7.18-7.55.1Not reportedSUSE-SU-2021:0768-1Not reported
Susepythonrpmenterprise storage 62.7.18-7.55.1Not reportedSUSE-SU-2021:0768-1Not reported
Susepython-baserpmenterprise storage 62.7.18-7.55.1Not reportedSUSE-SU-2021:0768-1Not reported
Susepython3rpmlinux enterprise module for web and scripting 123.4.10-25.66.1Not reportedSUSE-SU-2021:0886-1Not reported
Susepython3-baserpmlinux enterprise module for web and scripting 123.4.10-25.66.1Not reportedSUSE-SU-2021:0886-1Not reported
Susepython3rpmlinux enterprise software development kit 12 sp53.4.10-25.66.1Not reportedSUSE-SU-2021:0886-1Not reported
Susepython3-baserpmlinux enterprise software development kit 12 sp53.4.10-25.66.1Not reportedSUSE-SU-2021:0886-1Not reported
Susepython3rpmlinux enterprise server 12 sp53.4.10-25.66.1Not reportedSUSE-SU-2021:0886-1Not reported
Susepython3-baserpmlinux enterprise server 12 sp53.4.10-25.66.1Not reportedSUSE-SU-2021:0886-1Not reported
Susepython3rpmlinux enterprise server for sap applications 12 sp53.4.10-25.66.1Not reportedSUSE-SU-2021:0886-1Not reported
Susepython3-baserpmlinux enterprise server for sap applications 12 sp53.4.10-25.66.1Not reportedSUSE-SU-2021:0886-1Not reported
Opensusepython-w3librpmtumbleweed2.2.0-1.1Not reportedOPENSUSE-SU-2024:14037-1Not reported
Susepython3rpmlinux enterprise module for basesystem 15 sp23.6.13-3.78.1Not reportedSUSE-SU-2021:0947-1Not reported
Susepython3-corerpmlinux enterprise module for basesystem 15 sp23.6.13-3.78.1Not reportedSUSE-SU-2021:0947-1Not reported
Susepython3-corerpmlinux enterprise module for development tools 15 sp23.6.13-3.78.1Not reportedSUSE-SU-2021:0947-1Not reported
Susepython3rpmlinux enterprise micro 5.03.6.13-3.78.1Not reportedSUSE-SU-2021:0947-1Not reported
Susepython3-corerpmlinux enterprise micro 5.03.6.13-3.78.1Not reportedSUSE-SU-2021:0947-1Not reported
Opensusepythonrpmleap 15.22.7.18-lp152.3.15.1Not reportedOPENSUSE-SU-2021:0435-1Not reported
Opensusepython-baserpmleap 15.22.7.18-lp152.3.15.1Not reportedOPENSUSE-SU-2021:0435-1Not reported
Opensusepython-docrpmleap 15.22.7.18-lp152.3.15.1Not reportedOPENSUSE-SU-2021:0435-1Not reported

[Debian bug #983090]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [pypy3]Unknown
    Details (2)
    • 7.3.11+dfsg-2+deb12u3 · amd64 · bookworm

      Fixed · Fixed: 7.3.3+dfsg-3

      nvd · pypy3 · debian · bookworm

    • 7.3.11+dfsg-2+deb12u3 · arm64 · bookworm

      Fixed · Fixed: 7.3.3+dfsg-3

      nvd · pypy3 · debian · bookworm

  • [pypy3-dev]Unknown

    Source package: [pypy3]

    Details (2)
    • 7.3.11+dfsg-2+deb12u3 · all · bookworm

      Fixed · Fixed: 7.3.3+dfsg-3

      nvd · pypy3 · debian · bookworm

    • 7.3.11+dfsg-2+deb12u3 · all · bookworm

      Fixed · Fixed: 7.3.3+dfsg-3

      nvd · pypy3 · debian · bookworm

  • [pypy3-doc]Unknown

    Source package: [pypy3]

    Details (2)
    • 7.3.11+dfsg-2+deb12u3 · all · bookworm

      Fixed · Fixed: 7.3.3+dfsg-3

      nvd · pypy3 · debian · bookworm

    • 7.3.11+dfsg-2+deb12u3 · all · bookworm

      Fixed · Fixed: 7.3.3+dfsg-3

      nvd · pypy3 · debian · bookworm

  • [pypy3-lib]Unknown

    Source package: [pypy3]

    Details (2)
    • 7.3.11+dfsg-2+deb12u3 · amd64 · bookworm

      Fixed · Fixed: 7.3.3+dfsg-3

      nvd · pypy3 · debian · bookworm

    • 7.3.11+dfsg-2+deb12u3 · arm64 · bookworm

      Fixed · Fixed: 7.3.3+dfsg-3

      nvd · pypy3 · debian · bookworm

  • Source package: [pypy3]

    Details (2)
    • 7.3.11+dfsg-2+deb12u3 · all · bookworm

      Fixed · Fixed: 7.3.3+dfsg-3

      nvd · pypy3 · debian · bookworm

    • 7.3.11+dfsg-2+deb12u3 · all · bookworm

      Fixed · Fixed: 7.3.3+dfsg-3

      nvd · pypy3 · debian · bookworm

  • [pypy3-tk]Unknown

    Source package: [pypy3]

    Details (2)
    • 7.3.11+dfsg-2+deb12u3 · amd64 · bookworm

      Fixed · Fixed: 7.3.3+dfsg-3

      nvd · pypy3 · debian · bookworm

    • 7.3.11+dfsg-2+deb12u3 · arm64 · bookworm

      Fixed · Fixed: 7.3.3+dfsg-3

      nvd · pypy3 · debian · bookworm

  • [pypy3-venv]Unknown

    Source package: [pypy3]

    Details (2)
    • 7.3.11+dfsg-2+deb12u3 · all · bookworm

      Fixed · Fixed: 7.3.3+dfsg-3

      nvd · pypy3 · debian · bookworm

    • 7.3.11+dfsg-2+deb12u3 · all · bookworm

      Fixed · Fixed: 7.3.3+dfsg-3

      nvd · pypy3 · debian · bookworm

  • Source package: [python-django]

    Details (6)
    • 3:3.2.25-0+deb12u3 · all · bookworm

      Fixed · Fixed: 2:2.2.19-1

      nvd · python-django · debian · bookworm

    • 3:3.2.25-0+deb12u3 · all · bookworm

      Fixed · Fixed: 2:2.2.19-1

      nvd · python-django · debian · bookworm

    • 3:4.2.21-1~bpo12+1 · all · bookworm-backports

      Fixed · Fixed: 2:2.2.19-1

      nvd · python-django · debian · bookworm

    • 3:4.2.21-1~bpo12+1 · all · bookworm-backports

      Fixed · Fixed: 2:2.2.19-1

      nvd · python-django · debian · bookworm

    • 3:3.2.25-0+deb12u4 · all · bookworm-security

      Fixed · Fixed: 2:2.2.19-1

      nvd · python-django · debian · bookworm

    • 3:3.2.25-0+deb12u4 · all · bookworm-security

      Fixed · Fixed: 2:2.2.19-1

      nvd · python-django · debian · bookworm

  • Source package: [python-django]

    Details (6)
    • 3:3.2.25-0+deb12u3 · all · bookworm

      Fixed · Fixed: 2:2.2.19-1

      nvd · python-django · debian · bookworm

    • 3:3.2.25-0+deb12u3 · all · bookworm

      Fixed · Fixed: 2:2.2.19-1

      nvd · python-django · debian · bookworm

    • 3:4.2.21-1~bpo12+1 · all · bookworm-backports

      Fixed · Fixed: 2:2.2.19-1

      nvd · python-django · debian · bookworm

    • 3:4.2.21-1~bpo12+1 · all · bookworm-backports

      Fixed · Fixed: 2:2.2.19-1

      nvd · python-django · debian · bookworm

    • 3:3.2.25-0+deb12u4 · all · bookworm-security

      Fixed · Fixed: 2:2.2.19-1

      nvd · python-django · debian · bookworm

    • 3:3.2.25-0+deb12u4 · all · bookworm-security

      Fixed · Fixed: 2:2.2.19-1

      nvd · python-django · debian · bookworm

[openSUSE Tumbleweed]

  • Source package: [python-w3lib]

    Details (1)
    • 2.4.1-1.3 · noarch · tumbleweed

      Unknown · Fixed: 1.22.0-2.4, 2.2.0-1.1, 2.5.0-1.1

      Version impact unknown

      nvd · python-w3lib · opensuse · tumbleweed

  • Source package: [python-yarl]

    Details (1)
    • 1.24.5-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 1.24.5-1.1

      Version impact unknown

      nvd · python-yarl · opensuse · tumbleweed

  • Source package: [python-w3lib]

    Details (1)
    • 2.4.1-1.3 · noarch · tumbleweed

      Unknown · Fixed: 1.22.0-2.4, 2.2.0-1.1, 2.5.0-1.1

      Version impact unknown

      nvd · python-w3lib · opensuse · tumbleweed

  • Source package: [python-yarl]

    Details (1)
    • 1.24.5-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 1.24.5-1.1

      Version impact unknown

      nvd · python-yarl · opensuse · tumbleweed

Observed:

References