OESA-2026-3074 python-django security update

A high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fixes: This issue was discovered in version 6.0, before 6.0.5, and before 5.2.14. If the session has not been modified, the cookie's response header does not change, but...

CVE-2026-35192 vulnerabilities

Vulnerabilities for packages: py3-django...

OESA-2026-2220 python-django security update

A high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fixes: An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. MultiPartParser allows remote attackers to degrade performance by submitting multipart uploads wi...

python311-Django4-4.2.30-2.1 on GA media (moderate)

python311-Django4-4.2.30-2.1 on GA media Announcement ID: openSUSE-SU-2026:10708-1 Rating: moderate Cross-References: CVE-2026-35192 CVE-2026-5766 CVE-2026-6907 CVSS scores: CVE-2026-35192 SUSE : 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N CVE-2026-35192 SUSE : 2.3...

SUSE CVE-2026-35192

An issue was discovered in 6.0 before 6.0.5 and 5.2 before 5.2.14. Response headers do not vary on cookies if a session is not modified, but SESSIONSAVEEVERYREQUEST is True. A remote attacker can steal a user's session after that user visits a cached public page. Earlier, unsupported Django serie...

arthexis (>=0.1.3, <=2.0.0), cdm-ecommerce-backend (0.1.0) +67 more potentially affected by CVE-2026-35192 via django (>=5.2.0, <=5.2.13)

django PYPI version =5.2.0, =0.1.3, =8.6.0, =0.32.0, =8.9.21, =0.1.0, =0.1.0, =1.3.0, =0.1.0, =2025.7.0, =2025.7.38 - django-factory-all 0.1.2 and more Source cves: CVE-2026-35192 Source advisory: OSV:GHSA-7H2M-M8VJ-598H...

arthexis (>=0.1.3, <=2.0.0), cdm-ecommerce-backend (0.1.0) +67 more potentially affected by CVE-2026-35192 via django (>=5.2.0, <=5.2.13)

django PYPI version =5.2.0, =0.1.3, =8.6.0, =0.32.0, =8.9.21, =0.1.0, =0.1.0, =1.3.0, =0.1.0, =2025.7.0, =2025.7.38 - django-factory-all 0.1.2 and more Source cves: CVE-2026-35192 Source advisory: GHSA-7H2M-M8VJ-598H...

arches (8.0.0a1), avaintegration-metapackage (>=6.0.4.3, <=6.0.4.13) +39 more potentially affected by CVE-2026-35192 via django (>=6.0.0a1, <=6.0.4)

django PYPI version =6.0.0a1, =6.0.4.3, =2.0.0, =1.1.0, =0.1.0, =0.4.5 and more Source cves: CVE-2026-35192 Source advisory: SNYK:PYTHON-DJANGO-16425761...

arthexis (>=0.1.3, <=2.0.0), cdm-ecommerce-backend (0.1.0) +67 more potentially affected by CVE-2026-35192 via django (>=5.2.0, <=5.2.13)

django PYPI version =5.2.0, =0.1.3, =8.6.0, =0.32.0, =8.9.21, =0.1.0, =0.1.0, =1.3.0, =0.1.0, =2025.7.0, =2025.7.38 - django-factory-all 0.1.2 and more Source cves: CVE-2026-35192 Source advisory: OSV:PYSEC-2026-50...

CVE-2026-35192

creationtimestamp| type| source ---|---|--- 2026-05-05 15:43:59+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3ml4jpaa4lk2m...

avaintegration-metapackage (>=6.0.4.3, <=6.0.4.13), bravoserver (3.1.0) +31 more potentially affected by CVE-2026-35192 via django (>=6.0.0, <=6.0.4)

django PYPI version =6.0.0, =6.0.4.3, =2.0.0, =1.1.0, =0.70.2, =0.1.0b2, =0.1.2, =0.1.4 and more Source cves: CVE-2026-35192 Source advisory: MEND:CVE-2026-35192...