Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

django-anymail

2 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2
Registry
PyPI

Advisories 2

  • Anymail django-anymail version version 0.2 through 1.3 contains a CWE-532, CWE-209 vulnerability in WEBHOOK_AUTHORIZATION setting value…

    Affected: from 0.2, fixed in 1.4.

  • webhooks/base.py in Anymail (aka django-anymail) before 1.2.1 is prone to a timing attack vulnerability on the WEBHOOK_AUTHORIZATION…

    Affected: fixed in 1.2.1.