-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems directly from the break_long_headers template filter identified in the commit diff. The patch adds escape(header) to sanitize input, confirming the prior lack of escaping was the root cause. The function's purpose (formatting headers for HTML display) and the explicit XSS mitigation in the patch make this a clear high-confidence identification.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| djangorestframework | pip | < 3.15.2 | 3.15.2 |