Lucene search
+L

2 matches found

OSV
OSV
added 2026/07/19 11:11 a.m.2 views

OESA-2026-3075 python-django security update

A high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fixes: An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16. UpdateCacheMiddleware and the cachepage decorator cache responses that vary on cookies when the incoming reque...

6.3CVSS6.7AI score0.00361EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/12 11:39 p.m.6 views

BIT-DJANGO-2026-48588 Potential exposure of private data via cached Set-Cookie response

An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16. UpdateCacheMiddleware and the cachepage decorator cache responses that vary on cookies when the incoming request carries unrelated cookies, which allows remote attackers to read private data from the shared cache. Earlier,...

5.3CVSS7AI score0.00361EPSS
SaveExploits0References4
Rows per page
Query Builder