Lucene search
+L

17 matches found

vulnersOsv
vulnersOsv
•added 2026/06/03 3:30 p.m.•1 views

alexa-browser-client (3.3.0), channels (>=1.1.2, <=2.1.7) +7 more potentially affected by CVE-2026-44545 via daphne (2.2.5)

daphne PYPI version 2.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on daphne and may be impacted: - alexa-browser-client 3.3.0 - channels =1.1.2, =0.2.0, =2.0.1, =0.1.1, =0.1.2, =4.0.0a1, =0.9.0a1, =16.0.0a4, =16.0.0a5 Source cves: CVE-2026-44545...

7.5CVSS7.2AI score0.00573EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/06/03 2:16 p.m.•1 views

alexa-browser-client (3.3.0), channels (>=1.1.2, <=2.1.7) +7 more potentially affected by CVE-2026-44546 via daphne (2.2.5)

daphne PYPI version 2.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on daphne and may be impacted: - alexa-browser-client 3.3.0 - channels =1.1.2, =0.2.0, =2.0.1, =0.1.1, =0.1.2, =4.0.0a1, =0.9.0a1, =16.0.0a4, =16.0.0a5 Source cves: CVE-2026-44546...

5.3CVSS5.8AI score0.00288EPSS
SaveExploits0
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•33 views

EUVD-2021-0041

Malware in sbrugna...

7.4CVSS7.3AI score0.02658EPSS
SaveExploits1References9
Tenable Nessus
Tenable Nessus
•added 2025/08/27 12:00 a.m.•6 views

Linux Distros Unpatched Vulnerability : CVE-2020-35681

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Django Channels 3.x before 3.0.3 allows remote attackers to obtain sensitive information from a different request scope. The legacy channels.http.AsgiHandler...

7.4CVSS7.1AI score0.02658EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
•added 2023/02/15 3:51 a.m.•12 views

SUSE CVE-2020-35681

Django Channels 3.x before 3.0.3 allows remote attackers to obtain sensitive information from a different request scope. The legacy channels.http.AsgiHandler class, used for handling HTTP type requests in an ASGI environment prior to Django 3.0, did not correctly separate request scopes in Channe...

7.4CVSS6.5AI score0.02658EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2021/03/19 9:29 p.m.•182 views

Django Channels leakage of session identifiers using legacy AsgiHandler

Django Channels 3.x before 3.0.3 allows remote attackers to obtain sensitive information from a different request scope. The legacy channels.http.AsgiHandler class, used for handling HTTP type requests in an ASGI environment prior to Django 3.0, did not correctly separate request scopes in Channe...

7.4CVSS6.8AI score0.02658EPSS
SaveExploits1References7Affected Software1
osv_ghsa
osv_ghsa
•added 2021/03/19 9:29 p.m.•88 views

GHSA-V542-8Q9X-CFFC Django Channels leakage of session identifiers using legacy AsgiHandler

Django Channels 3.x before 3.0.3 allows remote attackers to obtain sensitive information from a different request scope. The legacy channels.http.AsgiHandler class, used for handling HTTP type requests in an ASGI environment prior to Django 3.0, did not correctly separate request scopes in Channe...

8.2CVSS7.1AI score0.02658EPSS
SaveExploits1References8
osv_debian
osv_debian
•added 2021/02/22 3:15 a.m.•34 views

DEBIAN-CVE-2020-35681

Django Channels 3.x before 3.0.3 allows remote attackers to obtain sensitive information from a different request scope. The legacy channels.http.AsgiHandler class, used for handling HTTP type requests in an ASGI environment prior to Django 3.0, did not correctly separate request scopes in Channe...

7.4CVSS7.3AI score0.02658EPSS
SaveExploits1References1
osv_pysec
osv_pysec
•added 2021/02/22 3:15 a.m.•29 views

PYSEC-2021-113

Django Channels 3.x before 3.0.3 allows remote attackers to obtain sensitive information from a different request scope. The legacy channels.http.AsgiHandler class, used for handling HTTP type requests in an ASGI environment prior to Django 3.0, did not correctly separate request scopes in Channe...

7.4CVSS7.1AI score0.02658EPSS
SaveExploits1References4
osv_ubuntu
osv_ubuntu
•added 2021/02/22 3:15 a.m.•66 views

UBUNTU-CVE-2020-35681

Django Channels 3.x before 3.0.3 allows remote attackers to obtain sensitive information from a different request scope. The legacy channels.http.AsgiHandler class, used for handling HTTP type requests in an ASGI environment prior to Django 3.0, did not correctly separate request scopes in Channe...

7.4CVSS7.1AI score0.02658EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2021/02/22 3:15 a.m.•28 views

CVE-2020-35681

Django Channels 3.x before 3.0.3 allows remote attackers to obtain sensitive information from a different request scope. The legacy channels.http.AsgiHandler class, used for handling HTTP type requests in an ASGI environment prior to Django 3.0, did not correctly separate request scopes in Channe...

7.4CVSS7.1AI score0.02658EPSS
SaveExploits1References2
PyPA
PyPA
•added 2021/02/22 3:15 a.m.•16 views

PYSEC-2021-113

Django Channels 3.x before 3.0.3 allows remote attackers to obtain sensitive information from a different request scope. The legacy channels.http.AsgiHandler class, used for handling HTTP type requests in an ASGI environment prior to Django 3.0, did not correctly separate request scopes in Channe...

7.4CVSS6.5AI score0.02658EPSS
SaveExploits1References4Affected Software1
Prion
Prion
•added 2021/02/22 3:15 a.m.•37 views

Design/Logic Flaw

Django Channels 3.x before 3.0.3 allows remote attackers to obtain sensitive information from a different request scope. The legacy channels.http.AsgiHandler class, used for handling HTTP type requests in an ASGI environment prior to Django 3.0, did not correctly separate request scopes in Channe...

5.8CVSS7.2AI score0.02658EPSS
SaveExploits1References3Affected Software1
Mend
Mend
•added 2021/02/22 2:03 a.m.•7 views

CVE-2020-35681

Django Channels 3.x before 3.0.3 allows remote attackers to obtain sensitive information from a different request scope. The legacy channels.http.AsgiHandler class, used for handling HTTP type requests in an ASGI environment prior to Django 3.0, did not correctly separate request scopes in Channe...

8.3CVSS0.02658EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/22 12:00 a.m.•5 views

CVE-2020-35681: Exposure of Sensitive Information to an Unauthorized Actor

Django Channels 3.x before 3.0.3 allows remote attackers to obtain sensitive information from a different request scope. The legacy channels.http.AsgiHandler class, used for handling HTTP type requests in an ASGI environment prior to Django 3.0, did not correctly separate request scopes in Channe...

7.4CVSS5.9AI score0.02658EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/02/22 12:00 a.m.•2 views

PT-2021-11824

Name of the Vulnerable Software and Affected Versions: Django Channels versions 3.0.0 through 3.0.2 Description: The legacy channels.http.AsgiHandler class in Django Channels did not correctly separate request scopes, potentially allowing remote attackers to obtain sensitive information from a...

8.2CVSS0.02658EPSS
SaveExploits1References19
CNNVD
CNNVD
•added 2021/02/21 12:00 a.m.•24 views

Django Channels Information Disclosure Vulnerability

Carlton Gibson Django Channels is an application framework from the Carlton Gibson community in Spain. Providing WebSocket, Long Polling HTTP, Task Sharing and other asynchronous support, the framework not only allows you to customize the behavior, but also to write support for your own protocols...

7.4CVSS7.2AI score0.02658EPSS
SaveExploits1References4
Rows per page
Query Builder