{"schemaVersion":3,"id":"USN-7903-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"python-django vulnerabilities\n\nIt was discovered that Django incorrectly handled certain characters in the\nFilteredRelation object. An attacker could possibly use this issue to\nexecute arbitrary SQL commands. This issue only affected Ubuntu 20.04 LTS,\nUbuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 25.04, and Ubuntu 25.10.\n(CVE-2025-13372)\n\nSeokchan Yoon discovered that Django inefficiently handled deserialization\nof XML objects. An attacker could possibly use this issue to cause Django\nto use excessive resources, causing a denial of service. (CVE-2025-64460)","dates":{"published":"2025-12-02T15:14:35.000Z","modified":"2026-06-25T13:32:31.483Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"python-django","name":"python-django","label":"python-django","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/python-django","purlType":"deb","versions":[{"text":"< 1.6.11-0ubuntu1.3+esm9","noFixRecorded":false,"fixedIn":null},{"text":"< 1.8.7-1ubuntu5.15+esm10","noFixRecorded":false,"fixedIn":null},{"text":"< 1:1.11.11-1ubuntu1.21+esm13","noFixRecorded":false,"fixedIn":null},{"text":"< 2:2.2.12-1ubuntu0.29+esm6","noFixRecorded":false,"fixedIn":null},{"text":"< 2:3.2.12-2ubuntu1.24","noFixRecorded":false,"fixedIn":null},{"text":"< 3:4.2.11-1ubuntu1.13","noFixRecorded":false,"fixedIn":null},{"text":"< 3:5.2.4-1ubuntu2.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.6.11-0ubuntu1.3+esm9 | < 1.8.7-1ubuntu5.15+esm10 | < 1:1.11.11-1ubuntu1.21+esm13 | < 2:2.2.12-1ubuntu0.29+esm6 | < 2:3.2.12-2ubuntu1.24 | < 3:4.2.11-1ubuntu1.13 | < 3:5.2.4-1ubuntu2.2","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-7903-1","label":"ubuntu.com/security/notices/USN-7903-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-13372","label":"ubuntu.com/security/CVE-2025-13372","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-64460","label":"ubuntu.com/security/CVE-2025-64460","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2025-13372","CVE-2025-64460"],"downstream":[],"duplicates":[],"related":["CVE-2025-13372","CVE-2025-64460"]},"timeline":[{"kind":"published","date":"2025-12-02T15:14:35.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-06-25T13:32:31.483Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T22:48:55.330Z","stale":false,"partial":false}}