Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
CleanStart Django containers may let attackers run code
published 4 days ago
Summary
The Django packages used in CleanStart's py3 and py3.10 containers contain a flaw that could allow an attacker to execute arbitrary code on the server. This could let unauthorized users take control of the affected system. Update the Django packages to the latest secured versions as soon as possible.
What to do
- Update cleanstart py3.10-django to version 1.11.23-r0.
- Update cleanstart py3-django to version 1.11.23-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | py3.10-django |
< 1.11.23-r0 Fix: upgrade to 1.11.23-r0
|
| CleanStart | cleanstart | py3-django |
< 1.11.23-r0 Fix: upgrade to 1.11.23-r0
|
Original advisory text
issue was discovered in Django 1
CVE-2019-14233 affects multiple packages. An issue was discovered in Django 1. See references for individual vulnerability details.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published31 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
CLEANSTART-2025-WX39780 · OSV
Track software like this
Free during beta