debian/python-django-channels vulnerabilities

Latest debian/python-django-channels CVEs

Newest publication first

1. CVE-2020-35681 Django Channels leakage of session identifiers using legacy AsgiHandler

   Published 2021-02-22

   High·CVSS 7.4

   Django Channels 3.x before 3.0.3 allows remote attackers to obtain sensitive information from a different request scope. The legacy channels.http.AsgiHandler class, used for handling HTTP type requests in an ASGI environment prior to Django 3.0, did not correctly separate request...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.