Django-Anymail Project Django-Anymail
2 CVEs affecting Django-Anymail Project Django-Anymail. Latest disclosed: 2018-03-13. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-6596 | Critical | 9.1 | 2018-02-03 | webhooks/base.py in Anymail (aka django-anymail) before 1.2.1 is prone to a timing attack vulnerability on the WEBHOOK_AUTHORIZATION secret, which allows remot… |
CVE-2018-1000089 | High | 7.4 | 2018-03-13 | Anymail django-anymail version version 0.2 through 1.3 contains a CWE-532, CWE-209 vulnerability in WEBHOOK_AUTHORIZATION setting value that can result in An a… |