data/CVE/list

@@ -1550,6 +1550,9 @@ CVE-2019-15487 (DfE School Experience before v16333-GA has XSS via a teacher tra
 	NOT-FOR-US: DfE School Experience
 CVE-2019-15486 (django-js-reverse (aka Django JS Reverse) before 0.9.1 has XSS via js_ ...)
 	- django-js-reverse <unfixed>
+	NOTE: https://github.com/ierror/django-js-reverse/pull/81
+	NOTE: https://github.com/ierror/django-js-reverse/commit/a3b57d1e4424e2fadabcd526d170c4868d55159c
+	TODO: check, might actually only have been introduced in upstream v0.9.0 with commits around 9850b675e3d988341c05302df236a560f7985184
 CVE-2019-15485 (Bolt before 3.6.10 has XSS via createFolder or createFile in Controlle ...)
 	NOT-FOR-US: Bolt CMS
 CVE-2019-15484 (Bolt before 3.6.10 has XSS via an image's alt or title field. ...)