GHSA-337x-4q8g-prc5 Improper Input Validation in Django

• PyPI Django: >= 1.11a1, < 1.11.18 → fixed in 1.11.18 • PyPI Django: >= 2.0a1, < 2.0.10 → fixed in 2.0.10 • PyPI Django: >= 2.1a1, < 2.1.5 → fixed in 2.1.5

In Django 1.11.x before 1.11.18, 2.0.x before 2.0.10, and 2.1.x before 2.1.5, an Improper Neutralization of Special Elements in Output Used by a Downstream Component issue exists in `django.views.defaults.page_not_found()`, leading to content spoofing (in a 404 error page) if a user fails to recognize that a crafted URL has malicious content.