7734 matches found
The vulnerability of the ASGI component of the Django web application framework allows attackers to perform spoofing attacks.
The vulnerability of the ASGI component of the Django web application framework involves bypassing authentication through spoofing. Exploiting this vulnerability allows a malicious actor to carry out spoofing attacks remotely...
Linux Distros Unpatched Vulnerability : CVE-2026-48587
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6. django.utils.cache.hasvaryheader in Django does not strip leading or trailing whitespa...
Linux Distros Unpatched Vulnerability : CVE-2026-35193
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6. django.middleware.cache.UpdateCacheMiddleware in Django does not add Authorization to...
Django 安全漏洞
Django is a set of open-source web frameworks based on the Python language, developed by the Django Foundation. This framework includes an object-oriented mapper, view system, template system, etc. Versions of Django prior to 6.0.6 and 5.2.15 contained security vulnerabilities. These...
The vulnerability of the GenericInlineModelAdmin class in the Django web development framework allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the GenericInlineModelAdmin class in the Django web development framework is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the Django web development framework, related to deficiencies in the authentication process, allows attackers to gain unauthorized access to protected information.
The vulnerability of the Django web development framework is related to shortcomings in its authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
PT-2026-45944
Name of the Vulnerable Software and Affected Versions Django versions prior to 5.2.15 Django versions prior to 6.0.6 Description The django.utils.cache.has vary header function does not strip leading or trailing whitespace from Vary response header values before comparison. This allows remote...
Linux Distros Unpatched Vulnerability : CVE-2026-6873
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Django 6.0 before 6.0.6 and 5.2 before 5.2.15. django.http.HttpRequest.getsignedcookie in Django uses a non-injective salt derivation...
Linux Distros Unpatched Vulnerability : CVE-2026-7666
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Django 6.0 before 6.0.6 and 5.2 before 5.2.15. django.core.mail.backends.smtp.EmailBackend in Django fails to prevent reuse of a...
CVE-2026-42197
RELATE is a web-based courseware package. Versions prior to commit 555f0efb1c5bd7531c07cd73724d7e566a81f620 have a stored cross-site scripting vulnerability that allows any enrolled student to execute arbitrary JavaScript in an administrator's browser session, potentially leading to full admin...
EUVD-2026-32627
RELATE is a web-based courseware package. Versions prior to commit 555f0efb1c5bd7531c07cd73724d7e566a81f620 have a stored cross-site scripting vulnerability that allows any enrolled student to execute arbitrary JavaScript in an administrator's browser session, potentially leading to full admin...
ROS-20260524-73-0050
A vulnerability in the MultiPartParser function of the Django web application software platform is related to algorithmic complexity. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...
CVE-2026-35192 vulnerabilities
Vulnerabilities for packages: py3-django...
GHSA-7H2M-M8VJ-598H vulnerabilities
Vulnerabilities for packages: py3-django...
CVE-2026-5766 vulnerabilities
Vulnerabilities for packages: py3-django...
GHSA-5HRC-GVXJ-W55P vulnerabilities
Vulnerabilities for packages: py3-django...
GHSA-W26R-RMM8-9C29 vulnerabilities
Vulnerabilities for packages: py3-django...
CVE-2026-6907 vulnerabilities
Vulnerabilities for packages: py3-django...
[SECURITY] Fedora 43 Update: python-django5-5.2.14-1.fc43
Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...
[SECURITY] Fedora 44 Update: python-django5-5.2.14-1.fc44
Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...