PT-2026-45944

🗓️ 03 Jun 2026 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 25 Views

Django versions before five two fifteen and six zero six fail to strip whitespace in the Vary header, enabling cache reading.

Reporter	Title	Published	Views	Family All 685
ALT Linux	Security fix for the ALT Linux 10 package python3-module-django version 3.2.11-alt1	24 Jan 202200:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package python3-module-django version 2.2.4-alt1	5 Aug 201900:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package python3-module-django version 2.2.4-alt1	5 Aug 201900:00	–	altlinux
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.7.2 addresses multiple security vulnerabilities	24 Apr 202415:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.7.1 addresses multiple existing security vulnerabilities	2 Apr 202410:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to Django-4.2.15-py3-none-any.whl CVE-2024-45231	12 Mar 202521:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to Django-4.2.15-py3-none-any.whl CVE-2024-45230	17 Mar 202507:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Edge Data Collector uses django-4.2.27-py3-none-any.whl which is vulnerable to CVE-2025-13473, CVE-2025-14550, CVE-2026-1207, CVE-2026-1285, CVE-2026-1287, CVE-2026-1312.	16 Apr 202613:07	–	ibm
IBM Security Bulletins	Security Bulletin: Denial of service, SQL injection, and other vulnerabilities might affect IBM Storage Defender – Resiliency Service	24 Feb 202523:37	–	ibm
IBM Security Bulletins	Security Bulletin: Denial of service, directory traversal, and other vulnerabilities might affect IBM Storage Defender – Resiliency Service	15 Apr 202502:50	–	ibm

Source	Link
suse	www.suse.com/security/cve/CVE-2021-45115
suse	www.suse.com/security/cve/CVE-2024-41991
bugzilla	www.bugzilla.suse.com/1267580
suse	www.suse.com/security/cve/CVE-2024-27351
suse	www.suse.com/security/cve/CVE-2021-33203
t	www.t.me/CVEtracker/55723
suse	www.suse.com/security/cve/CVE-2026-25674
suse	www.suse.com/security/cve/CVE-2025-13473
osv	www.osv.dev/vulnerability/OESA-2026-2660
suse	www.suse.com/security/cve/CVE-2025-26699

14 Jul 2026 00:00Current

5.6Medium risk

Vulners AI Score5.6

CVSS 3.15.3 - 8.3

CVSS 25

CVSS 37.5

CVSS 42.3

EPSS0.25782

SSVC