[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2023-23969":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T02:55:30.529Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":406,"aliases":407,"duplicate_of":9,"upstream":411,"downstream":412,"duplicates":445,"related":446,"reserved_at":9,"published_at":456,"modified_at":457,"state":458,"summary":459,"references_raw":468,"kevs":556,"epss":557,"epss_history":560,"metrics":820,"affected":833},"CVE-2023-23969","In Django 3.2 before 3.2.17, 4.0 before 4.0.9, and 4.1 before 4.1.6, the parsed values of Accept-Language headers are cached in order to avoid repetitive parsing. This leads to a potential denial-of-service vector via excessive memory usage if the raw value of Accept-Language headers is very large.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-770","Allocation of Resources Without Limits or Throttling","The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.","weakness","Incomplete","Base","High",[20,106,116,120,124,128,132,136,168,230,234,238,268,298,330,334,338,342,346,350],{"id":21,"name":22,"techniques":23},"CAPEC-125","Flooding",[24,78],{"id":25,"name":26,"tactics":27,"countermeasures":31},"T1498.001","Direct Network Flood",[28],{"id":29,"name":30},"TA0105","Impact",[32,37,41,45,49,53,57,61,65,69,74],{"id":33,"name":34,"tactic":35},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":36},"Detect",{"id":38,"name":39,"tactic":40},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":36},{"id":42,"name":43,"tactic":44},"D3-CSPP","Client-server Payload Profiling",{"name":36},{"id":46,"name":47,"tactic":48},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":36},{"id":50,"name":51,"tactic":52},"D3-NTSA","Network Traffic Signature Analysis",{"name":36},{"id":54,"name":55,"tactic":56},"D3-APCA","Application Protocol Command Analysis",{"name":36},{"id":58,"name":59,"tactic":60},"D3-NTCD","Network Traffic Community Deviation",{"name":36},{"id":62,"name":63,"tactic":64},"D3-RTSD","Remote Terminal Session Detection",{"name":36},{"id":66,"name":67,"tactic":68},"D3-ISVA","Inbound Session Volume Analysis",{"name":36},{"id":70,"name":71,"tactic":72},"D3-NTF","Network Traffic Filtering",{"name":73},"Isolate",{"id":75,"name":76,"tactic":77},"D3-ITF","Inbound Traffic Filtering",{"name":73},{"id":79,"name":80,"tactics":81,"countermeasures":83},"T1499","Endpoint Denial of Service",[82],{"id":29,"name":30},[84,86,88,90,92,94,96,98,100,102,104],{"id":33,"name":34,"tactic":85},{"name":36},{"id":38,"name":39,"tactic":87},{"name":36},{"id":42,"name":43,"tactic":89},{"name":36},{"id":46,"name":47,"tactic":91},{"name":36},{"id":50,"name":51,"tactic":93},{"name":36},{"id":54,"name":55,"tactic":95},{"name":36},{"id":58,"name":59,"tactic":97},{"name":36},{"id":62,"name":63,"tactic":99},{"name":36},{"id":66,"name":67,"tactic":101},{"name":36},{"id":70,"name":71,"tactic":103},{"name":73},{"id":75,"name":76,"tactic":105},{"name":73},{"id":107,"name":108,"techniques":109},"CAPEC-130","Excessive Allocation",[110],{"id":111,"name":112,"tactics":113,"countermeasures":115},"T1499.003","Application Exhaustion Flood",[114],{"id":29,"name":30},[],{"id":117,"name":118,"techniques":119},"CAPEC-147","XML Ping of the Death",[],{"id":121,"name":122,"techniques":123},"CAPEC-197","Exponential Data Expansion",[],{"id":125,"name":126,"techniques":127},"CAPEC-229","Serialized Data Parameter Blowup",[],{"id":129,"name":130,"techniques":131},"CAPEC-230","Serialized Data with Nested Payloads",[],{"id":133,"name":134,"techniques":135},"CAPEC-231","Oversized Serialized Data Payloads",[],{"id":137,"name":138,"techniques":139},"CAPEC-469","HTTP DoS",[140],{"id":141,"name":142,"tactics":143,"countermeasures":145},"T1499.002","Service Exhaustion Flood",[144],{"id":29,"name":30},[146,148,150,152,154,156,158,160,162,164,166],{"id":33,"name":34,"tactic":147},{"name":36},{"id":38,"name":39,"tactic":149},{"name":36},{"id":42,"name":43,"tactic":151},{"name":36},{"id":46,"name":47,"tactic":153},{"name":36},{"id":50,"name":51,"tactic":155},{"name":36},{"id":54,"name":55,"tactic":157},{"name":36},{"id":58,"name":59,"tactic":159},{"name":36},{"id":62,"name":63,"tactic":161},{"name":36},{"id":66,"name":67,"tactic":163},{"name":36},{"id":70,"name":71,"tactic":165},{"name":73},{"id":75,"name":76,"tactic":167},{"name":73},{"id":169,"name":170,"techniques":171},"CAPEC-482","TCP Flood",[172,198,204],{"id":25,"name":26,"tactics":173,"countermeasures":175},[174],{"id":29,"name":30},[176,178,180,182,184,186,188,190,192,194,196],{"id":33,"name":34,"tactic":177},{"name":36},{"id":38,"name":39,"tactic":179},{"name":36},{"id":42,"name":43,"tactic":181},{"name":36},{"id":46,"name":47,"tactic":183},{"name":36},{"id":50,"name":51,"tactic":185},{"name":36},{"id":54,"name":55,"tactic":187},{"name":36},{"id":58,"name":59,"tactic":189},{"name":36},{"id":62,"name":63,"tactic":191},{"name":36},{"id":66,"name":67,"tactic":193},{"name":36},{"id":70,"name":71,"tactic":195},{"name":73},{"id":75,"name":76,"tactic":197},{"name":73},{"id":199,"name":200,"tactics":201,"countermeasures":203},"T1499.001","OS Exhaustion Flood",[202],{"id":29,"name":30},[],{"id":141,"name":142,"tactics":205,"countermeasures":207},[206],{"id":29,"name":30},[208,210,212,214,216,218,220,222,224,226,228],{"id":33,"name":34,"tactic":209},{"name":36},{"id":38,"name":39,"tactic":211},{"name":36},{"id":42,"name":43,"tactic":213},{"name":36},{"id":46,"name":47,"tactic":215},{"name":36},{"id":50,"name":51,"tactic":217},{"name":36},{"id":54,"name":55,"tactic":219},{"name":36},{"id":58,"name":59,"tactic":221},{"name":36},{"id":62,"name":63,"tactic":223},{"name":36},{"id":66,"name":67,"tactic":225},{"name":36},{"id":70,"name":71,"tactic":227},{"name":73},{"id":75,"name":76,"tactic":229},{"name":73},{"id":231,"name":232,"techniques":233},"CAPEC-486","UDP Flood",[],{"id":235,"name":236,"techniques":237},"CAPEC-487","ICMP Flood",[],{"id":239,"name":240,"techniques":241},"CAPEC-488","HTTP Flood",[242],{"id":141,"name":142,"tactics":243,"countermeasures":245},[244],{"id":29,"name":30},[246,248,250,252,254,256,258,260,262,264,266],{"id":33,"name":34,"tactic":247},{"name":36},{"id":38,"name":39,"tactic":249},{"name":36},{"id":42,"name":43,"tactic":251},{"name":36},{"id":46,"name":47,"tactic":253},{"name":36},{"id":50,"name":51,"tactic":255},{"name":36},{"id":54,"name":55,"tactic":257},{"name":36},{"id":58,"name":59,"tactic":259},{"name":36},{"id":62,"name":63,"tactic":261},{"name":36},{"id":66,"name":67,"tactic":263},{"name":36},{"id":70,"name":71,"tactic":265},{"name":73},{"id":75,"name":76,"tactic":267},{"name":73},{"id":269,"name":270,"techniques":271},"CAPEC-489","SSL Flood",[272],{"id":141,"name":142,"tactics":273,"countermeasures":275},[274],{"id":29,"name":30},[276,278,280,282,284,286,288,290,292,294,296],{"id":33,"name":34,"tactic":277},{"name":36},{"id":38,"name":39,"tactic":279},{"name":36},{"id":42,"name":43,"tactic":281},{"name":36},{"id":46,"name":47,"tactic":283},{"name":36},{"id":50,"name":51,"tactic":285},{"name":36},{"id":54,"name":55,"tactic":287},{"name":36},{"id":58,"name":59,"tactic":289},{"name":36},{"id":62,"name":63,"tactic":291},{"name":36},{"id":66,"name":67,"tactic":293},{"name":36},{"id":70,"name":71,"tactic":295},{"name":73},{"id":75,"name":76,"tactic":297},{"name":73},{"id":299,"name":300,"techniques":301},"CAPEC-490","Amplification",[302],{"id":303,"name":304,"tactics":305,"countermeasures":307},"T1498.002","Reflection Amplification",[306],{"id":29,"name":30},[308,310,312,314,316,318,320,322,324,326,328],{"id":33,"name":34,"tactic":309},{"name":36},{"id":38,"name":39,"tactic":311},{"name":36},{"id":42,"name":43,"tactic":313},{"name":36},{"id":46,"name":47,"tactic":315},{"name":36},{"id":50,"name":51,"tactic":317},{"name":36},{"id":54,"name":55,"tactic":319},{"name":36},{"id":58,"name":59,"tactic":321},{"name":36},{"id":62,"name":63,"tactic":323},{"name":36},{"id":66,"name":67,"tactic":325},{"name":36},{"id":70,"name":71,"tactic":327},{"name":73},{"id":75,"name":76,"tactic":329},{"name":73},{"id":331,"name":332,"techniques":333},"CAPEC-491","Quadratic Data Expansion",[],{"id":335,"name":336,"techniques":337},"CAPEC-493","SOAP Array Blowup",[],{"id":339,"name":340,"techniques":341},"CAPEC-494","TCP Fragmentation",[],{"id":343,"name":344,"techniques":345},"CAPEC-495","UDP Fragmentation",[],{"id":347,"name":348,"techniques":349},"CAPEC-496","ICMP Fragmentation",[],{"id":351,"name":352,"techniques":353},"CAPEC-528","XML Flood",[354,380],{"id":141,"name":142,"tactics":355,"countermeasures":357},[356],{"id":29,"name":30},[358,360,362,364,366,368,370,372,374,376,378],{"id":33,"name":34,"tactic":359},{"name":36},{"id":38,"name":39,"tactic":361},{"name":36},{"id":42,"name":43,"tactic":363},{"name":36},{"id":46,"name":47,"tactic":365},{"name":36},{"id":50,"name":51,"tactic":367},{"name":36},{"id":54,"name":55,"tactic":369},{"name":36},{"id":58,"name":59,"tactic":371},{"name":36},{"id":62,"name":63,"tactic":373},{"name":36},{"id":66,"name":67,"tactic":375},{"name":36},{"id":70,"name":71,"tactic":377},{"name":73},{"id":75,"name":76,"tactic":379},{"name":73},{"id":25,"name":26,"tactics":381,"countermeasures":383},[382],{"id":29,"name":30},[384,386,388,390,392,394,396,398,400,402,404],{"id":33,"name":34,"tactic":385},{"name":36},{"id":38,"name":39,"tactic":387},{"name":36},{"id":42,"name":43,"tactic":389},{"name":36},{"id":46,"name":47,"tactic":391},{"name":36},{"id":50,"name":51,"tactic":393},{"name":36},{"id":54,"name":55,"tactic":395},{"name":36},{"id":58,"name":59,"tactic":397},{"name":36},{"id":62,"name":63,"tactic":399},{"name":36},{"id":66,"name":67,"tactic":401},{"name":36},{"id":70,"name":71,"tactic":403},{"name":73},{"id":75,"name":76,"tactic":405},{"name":73},[],[408,409,410],"GHSA-q2jf-h9jm-m7p4","BIT-django-2023-23969","PYSEC-2023-12",[],[413,415,417,419,421,423,425,427,429,431,433,435,437,439,441,443],{"_key":414},"OPENSUSE-SU-2023:0057-1",{"_key":416},"SUSE-SU-2024:2545-1",{"_key":418},"OPENSUSE-SU-2023:0178-1",{"_key":420},"OPENSUSE-SU-2024:0251-1",{"_key":422},"OPENSUSE-SU-2024:12654-1",{"_key":424},"OPENSUSE-SU-2024:14208-1",{"_key":426},"OPENSUSE-SU-2025:14662-1",{"_key":428},"DLA-3306-1",{"_key":430},"RHSA-2023:2101",{"_key":432},"OPENSUSE-SU-2026:10005-1",{"_key":434},"UBUNTU-CVE-2023-23969",{"_key":436},"MGASA-2023-0026",{"_key":438},"USN-5837-1",{"_key":440},"DEBIAN-CVE-2023-23969",{"_key":442},"RHSA-2023:2097",{"_key":444},"USN-5837-2",[],[447,448,449,450,451,452,453,454,455],{"_key":414},{"_key":416},{"_key":418},{"_key":420},{"_key":422},{"_key":424},{"_key":426},{"_key":432},{"_key":436},"2023-02-01T00:00:00.000Z","2025-03-27T14:17:49.400Z","Modified",{"cisa_kev":460,"cisa_ransomware":460,"cisa_vendor":9,"epss_severity":461,"epss_score":462,"severity":463,"severity_score":464,"severity_version":465,"severity_source":466,"severity_vector":467,"severity_status":458},false,"low",0.05085,"high",7.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",[469,474,482,488,494,498,502,506,511,515,519,523,527,532,536,540,544,548,552],{"url":470,"sources":471,"tags":473},"https://groups.google.com/forum/#%21forum/django-announce",[466,472],"nvd",[],{"url":475,"sources":476,"tags":478},"https://docs.djangoproject.com/en/4.1/releases/security/",[466,472,477],"osv_pypi",[479,480,481],"Patch","Vendor Advisory","WEB",{"url":483,"sources":484,"tags":485},"https://www.djangoproject.com/weblog/2023/feb/01/security-releases/",[466,472,477],[486,480,487],"Release Notes","ARTICLE",{"url":489,"sources":490,"tags":491},"https://lists.debian.org/debian-lts-announce/2023/02/msg00000.html",[466,472,477],[492,493,481],"Mailing List","Third Party Advisory",{"url":495,"sources":496,"tags":497},"https://security.netapp.com/advisory/ntap-20230302-0007/",[466,472],[],{"url":499,"sources":500,"tags":501},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HWY6DQWRVBALV73BPUVBXC3QIYUM24IK/",[466,472],[480],{"url":503,"sources":504,"tags":505},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LTZVAKU5ALQWOKFTPISE257VCVIYGFQI/",[466,472],[480],{"url":507,"sources":508,"tags":509},"https://nvd.nist.gov/vuln/detail/CVE-2023-23969",[477],[510],"Advisory",{"url":512,"sources":513,"tags":514},"https://github.com/django/django/commit/4452642f193533e288a52c02efb5bbc766a68f95",[477],[481],{"url":516,"sources":517,"tags":518},"https://github.com/django/django/commit/9d7bd5a56b1ce0576e8e07a8001373576d277942",[477],[481],{"url":520,"sources":521,"tags":522},"https://github.com/django/django/commit/c7e0151fdf33e1b11d488b6f67b94fdf3a30614a",[477],[481],{"url":524,"sources":525,"tags":526},"https://docs.djangoproject.com/en/4.1/releases/security",[477],[481],{"url":528,"sources":529,"tags":530},"https://github.com/django/django",[477],[531],"PACKAGE",{"url":533,"sources":534,"tags":535},"https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2023-12.yaml",[477],[481],{"url":537,"sources":538,"tags":539},"https://groups.google.com/forum/#!forum/django-announce",[477],[481],{"url":541,"sources":542,"tags":543},"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HWY6DQWRVBALV73BPUVBXC3QIYUM24IK",[477],[481],{"url":545,"sources":546,"tags":547},"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LTZVAKU5ALQWOKFTPISE257VCVIYGFQI",[477],[481],{"url":549,"sources":550,"tags":551},"https://security.netapp.com/advisory/ntap-20230302-0007",[477],[481],{"url":553,"sources":554,"tags":555},"https://www.djangoproject.com/weblog/2023/feb/01/security-releases",[477],[481],[],{"date":558,"score":462,"percentile":559},"2026-06-04",0.89972,[561,565,568,571,574,577,579,582,584,587,590,593,596,599,602,606,609,612,615,617,619,622,625,627,630,634,637,640,643,646,649,652,655,658,661,664,667,670,673,676,679,682,685,687,690,694,697,700,703,705,708,711,714,717,720,723,726,730,733,736,738,740,743,746,749,751,753,755,758,761,763,765,768,770,774,777,781,784,786,789,792,795,798,800,803,806,809,811,814,817],{"date":562,"score":563,"percentile":564},"2025-11-04",0.01008,0.76351,{"date":566,"score":563,"percentile":567},"2025-11-05",0.7635,{"date":569,"score":563,"percentile":570},"2025-11-06",0.76346,{"date":572,"score":563,"percentile":573},"2025-11-07",0.7636,{"date":575,"score":563,"percentile":576},"2025-11-08",0.76364,{"date":578,"score":563,"percentile":573},"2025-11-09",{"date":580,"score":563,"percentile":581},"2025-11-10",0.76344,{"date":583,"score":563,"percentile":570},"2025-11-11",{"date":585,"score":563,"percentile":586},"2025-11-12",0.76365,{"date":588,"score":563,"percentile":589},"2025-11-13",0.76372,{"date":591,"score":563,"percentile":592},"2025-11-14",0.76378,{"date":594,"score":563,"percentile":595},"2025-11-15",0.76373,{"date":597,"score":563,"percentile":598},"2025-11-16",0.76371,{"date":600,"score":563,"percentile":601},"2025-11-17",0.76361,{"date":603,"score":604,"percentile":605},"2025-11-18",0.03084,0.85539,{"date":607,"score":604,"percentile":608},"2025-11-19",0.85541,{"date":610,"score":604,"percentile":611},"2025-11-20",0.85543,{"date":613,"score":563,"percentile":614},"2025-11-21",0.76386,{"date":616,"score":563,"percentile":614},"2025-11-22",{"date":618,"score":563,"percentile":595},"2025-11-23",{"date":620,"score":563,"percentile":621},"2025-11-24",0.76374,{"date":623,"score":563,"percentile":624},"2025-11-25",0.76381,{"date":626,"score":563,"percentile":614},"2025-11-26",{"date":628,"score":563,"percentile":629},"2025-11-27",0.76389,{"date":631,"score":632,"percentile":633},"2025-11-28",0.01075,0.77112,{"date":635,"score":632,"percentile":636},"2025-11-29",0.7712,{"date":638,"score":632,"percentile":639},"2025-11-30",0.77118,{"date":641,"score":632,"percentile":642},"2025-12-01",0.77229,{"date":644,"score":632,"percentile":645},"2025-12-02",0.77239,{"date":647,"score":632,"percentile":648},"2025-12-03",0.77227,{"date":650,"score":632,"percentile":651},"2025-12-04",0.77116,{"date":653,"score":632,"percentile":654},"2025-12-05",0.77123,{"date":656,"score":632,"percentile":657},"2025-12-06",0.77126,{"date":659,"score":632,"percentile":660},"2025-12-07",0.77122,{"date":662,"score":632,"percentile":663},"2025-12-08",0.77128,{"date":665,"score":632,"percentile":666},"2025-12-09",0.77152,{"date":668,"score":632,"percentile":669},"2025-12-10",0.77181,{"date":671,"score":632,"percentile":672},"2025-12-11",0.77198,{"date":674,"score":632,"percentile":675},"2025-12-12",0.77218,{"date":677,"score":632,"percentile":678},"2025-12-13",0.77222,{"date":680,"score":632,"percentile":681},"2025-12-14",0.7722,{"date":683,"score":632,"percentile":684},"2025-12-15",0.77216,{"date":686,"score":632,"percentile":648},"2025-12-16",{"date":688,"score":632,"percentile":689},"2025-12-17",0.77237,{"date":691,"score":692,"percentile":693},"2025-12-18",0.02705,0.8543,{"date":695,"score":692,"percentile":696},"2025-12-19",0.85434,{"date":698,"score":692,"percentile":699},"2025-12-20",0.85428,{"date":701,"score":692,"percentile":702},"2025-12-21",0.85431,{"date":704,"score":692,"percentile":693},"2025-12-22",{"date":706,"score":692,"percentile":707},"2025-12-23",0.85436,{"date":709,"score":692,"percentile":710},"2025-12-24",0.85439,{"date":712,"score":692,"percentile":713},"2025-12-25",0.85454,{"date":715,"score":692,"percentile":716},"2025-12-26",0.85457,{"date":718,"score":692,"percentile":719},"2025-12-27",0.85509,{"date":721,"score":692,"percentile":722},"2025-12-28",0.85448,{"date":724,"score":692,"percentile":725},"2025-12-29",0.85447,{"date":727,"score":728,"percentile":729},"2025-12-30",0.03499,0.87231,{"date":731,"score":728,"percentile":732},"2025-12-31",0.87242,{"date":734,"score":728,"percentile":735},"2026-01-01",0.87302,{"date":737,"score":728,"percentile":735},"2026-01-02",{"date":739,"score":728,"percentile":735},"2026-01-03",{"date":741,"score":728,"percentile":742},"2026-01-04",0.87236,{"date":744,"score":728,"percentile":745},"2026-01-05",0.87233,{"date":747,"score":728,"percentile":748},"2026-01-06",0.87235,{"date":750,"score":728,"percentile":748},"2026-01-07",{"date":752,"score":728,"percentile":732},"2026-01-08",{"date":754,"score":728,"percentile":732},"2026-01-09",{"date":756,"score":728,"percentile":757},"2026-01-10",0.87244,{"date":759,"score":728,"percentile":760},"2026-01-11",0.87238,{"date":762,"score":728,"percentile":748},"2026-01-12",{"date":764,"score":728,"percentile":745},"2026-01-13",{"date":766,"score":728,"percentile":767},"2026-01-14",0.87245,{"date":769,"score":728,"percentile":757},"2026-01-15",{"date":771,"score":772,"percentile":773},"2026-01-16",0.06091,0.90488,{"date":775,"score":772,"percentile":776},"2026-01-17",0.90486,{"date":778,"score":779,"percentile":780},"2026-01-18",0.05535,0.89978,{"date":782,"score":779,"percentile":783},"2026-01-19",0.89977,{"date":785,"score":779,"percentile":780},"2026-01-20",{"date":787,"score":779,"percentile":788},"2026-01-21",0.89981,{"date":790,"score":779,"percentile":791},"2026-01-22",0.89984,{"date":793,"score":779,"percentile":794},"2026-01-23",0.89993,{"date":796,"score":779,"percentile":797},"2026-01-24",0.89999,{"date":799,"score":779,"percentile":797},"2026-01-25",{"date":801,"score":772,"percentile":802},"2026-01-26",0.90511,{"date":804,"score":772,"percentile":805},"2026-01-27",0.90514,{"date":807,"score":772,"percentile":808},"2026-01-28",0.90519,{"date":810,"score":772,"percentile":808},"2026-01-29",{"date":812,"score":772,"percentile":813},"2026-01-30",0.90518,{"date":815,"score":772,"percentile":816},"2026-01-31",0.90529,{"date":818,"score":772,"percentile":819},"2026-02-01",0.90585,[821,826,828],{"source":466,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":822,"cvss_v4_0":9},{"baseScore":464,"baseSeverity":823,"vectorString":467,"impactScore":824,"exploitabilityScore":825},"HIGH",6,10,{"source":472,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":827,"cvss_v4_0":9},{"baseScore":464,"baseSeverity":823,"vectorString":467,"impactScore":824,"exploitabilityScore":825},{"source":477,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":829,"cvss_v4_0":830},{"baseScore":464,"baseSeverity":9,"vectorString":467,"impactScore":824,"exploitabilityScore":825},{"baseScore":831,"baseSeverity":9,"vectorString":832,"impactScore":9,"exploitabilityScore":9},8.7,"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",[834,843,864],{"ecosystem":9,"name":835,"vendor":836,"product":837,"cpe_part":838,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":839},"debian linux","debian","debian_linux","o",[840],{"version":841,"is_range":460,"range_type":842,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"10.0","cpe",{"ecosystem":9,"name":844,"vendor":845,"product":846,"cpe_part":847,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":848},"Django","djangoproject","django","a",[849,856,860],{"version":850,"is_range":851,"range_type":842,"version_start":852,"version_start_type":853,"version_end":854,"version_end_type":855,"fixed_in":9},"gte3.2_lt3.2.17",true,"3.2","including","3.2.17","excluding",{"version":857,"is_range":851,"range_type":842,"version_start":858,"version_start_type":853,"version_end":859,"version_end_type":855,"fixed_in":9},"gte4.0_lt4.0.9","4.0","4.0.9",{"version":861,"is_range":851,"range_type":842,"version_start":862,"version_start_type":853,"version_end":863,"version_end_type":855,"fixed_in":9},"gte4.1_lt4.1.6","4.1","4.1.6",{"ecosystem":865,"name":846,"vendor":865,"product":846,"cpe_part":9,"purl_type":866,"purl_namespace":9,"purl_name":846,"source":9,"versions":867},"PyPI","pypi",[868,872,875,878],{"version":869,"is_range":851,"range_type":870,"version_start":871,"version_start_type":853,"version_end":854,"version_end_type":855,"fixed_in":9},"gte3_2a1_lt3_2_17","ecosystem","3.2a1",{"version":873,"is_range":851,"range_type":870,"version_start":874,"version_start_type":853,"version_end":859,"version_end_type":855,"fixed_in":9},"gte4_0a1_lt4_0_9","4.0a1",{"version":876,"is_range":851,"range_type":870,"version_start":877,"version_start_type":853,"version_end":863,"version_end_type":855,"fixed_in":9},"gte4_1a1_lt4_1_6","4.1a1",{"version":879,"is_range":851,"range_type":870,"version_start":862,"version_start_type":853,"version_end":863,"version_end_type":855,"fixed_in":9},"gte4_1_lt4_1_6"]