[Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-113733/python-django

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e86c9583 by Salvatore Bonaccorso at 2026-11-03T22:41:49+01:00
Update status for CVE-2026-113733/python-django

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -11,7 +11,7 @@ CVE-2026-113593 [Potential exposure of private data via empty and missing Vary h
 	- python-django 3:5.2.19-1 (bug #1152952)
 	NOTE: https://www.djangoproject.com/weblog/2026/nov/03/security-releases/
 CVE-2026-113733 [Password hash disclosure to "view only" admin users with custom user models]
-	- python-django 3:5.2.19-1 (bug #1152952)
+	- python-django <not-affected> (Vulnerable code introduced in Django 6.0)
 	NOTE: https://www.djangoproject.com/weblog/2026/nov/03/security-releases/
 CVE-2026-114582 [Server-side request forgery via SpatialReference string input]
 	- python-django 3:5.2.19-1 (bug #1152952)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e86c958359b922b7d842b37888c6fc927c29a0fc

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e86c958359b922b7d842b37888c6fc927c29a0fc
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261103/c4b41b2f/attachment.htm>