[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-MGASA-2026-0032":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T17:35:29.592Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":11,"aliases":12,"duplicate_of":9,"upstream":13,"downstream":26,"duplicates":27,"related":28,"reserved_at":9,"published_at":35,"modified_at":36,"state":9,"summary":37,"references_raw":39,"kevs":55,"epss":9,"epss_history":56,"metrics":57,"affected":58},"MGASA-2026-0032","Updated python-django packages fix security vulnerabilities\n\nUsername enumeration through timing difference in mod_wsgi\nauthentication handler. (CVE-2025-13473)\nPotential denial-of-service vulnerability via repeated headers when\nusing ASGI. (CVE-2025-14550)\nPotential SQL injection via raster lookups on PostGIS. (CVE-2026-1207)\nPotential denial-of-service vulnerability in django.utils.text.Truncator\nHTML methods. (CVE-2026-1285)\nPotential SQL injection in column aliases via control characters.\n(CVE-2026-1287)\nPotential SQL injection via QuerySet.order_by and FilteredRelation.\n(CVE-2026-1312)\n",null,[],[],[],[14,16,18,20,22,24],{"_key":15},"CVE-2025-13473",{"_key":17},"CVE-2025-14550",{"_key":19},"CVE-2026-1207",{"_key":21},"CVE-2026-1285",{"_key":23},"CVE-2026-1287",{"_key":25},"CVE-2026-1312",[],[],[29,30,31,32,33,34],{"_key":15},{"_key":17},{"_key":19},{"_key":21},{"_key":23},{"_key":25},"2026-02-06T05:11:54Z","2026-04-16T04:19:22.996290Z",{"cisa_kev":38,"cisa_ransomware":38,"cisa_vendor":9,"epss_severity":9,"epss_score":9,"severity":9,"severity_score":9,"severity_version":9,"severity_source":9,"severity_vector":9,"severity_status":9},false,[40,46,51],{"url":41,"sources":42,"tags":44},"https://advisories.mageia.org/MGASA-2026-0032.html",[43],"osv_mageia",[45],"Advisory",{"url":47,"sources":48,"tags":49},"https://bugs.mageia.org/show_bug.cgi?id=35103",[43],[50],"REPORT",{"url":52,"sources":53,"tags":54},"https://ubuntu.com/security/notices/USN-8009-1",[43],[50,45],[],[],[],[59],{"ecosystem":60,"name":61,"vendor":62,"product":61,"cpe_part":9,"purl_type":63,"purl_namespace":62,"purl_name":61,"source":9,"versions":64},"Mageia","python-django","mageia","rpm",[65],{"version":66,"is_range":67,"range_type":68,"version_start":9,"version_start_type":9,"version_end":69,"version_end_type":70,"fixed_in":9},"lt4_1_13_1_10_mga9",true,"ecosystem","4.1.13-1.10.mga9","excluding"]