8879 matches found
python313-django-allauth-65.19.4-1.1 on GA media (moderate)
python313-django-allauth-65.19.4-1.1 on GA media Announcement ID: openSUSE-SU-2026:11903-1 Rating: moderate Cross-References: CVE-2026-97764 CVSS scores: CVE-2026-97764 SUSE : 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N Affected Products: openSUSE Tumbleweed An update that solves one...
CVE-2021-35042
CVE-2021-35042: Django SQL injection vulnerability I. Overview Django is an open-source Web Application Framework written in Python, built on the MVC Model - View - Controller model. It was originally built to manage news content websites owned by the Lawrence publishing corporation, as a CMS...
CVE-2026-1312
CVE-2026-1312 is a high-severity Django SQL injection vulnerability: when a column alias containing a dot is used in QuerySet.orderby, combined with FilteredRelation dynamically constructing queries via dictionary expansion, an attacker may be able to inject malicious SQL Affected versions:...
CVE-2026-1207
CVE-2026-1207 Django GIS RasterField SQL Injection Vulnerability Reproduction Vulnerability Overview Vulnerability Type : SQL Injection Affected Component : django.contrib.gis RasterField When querying with Django GIS's RasterField, the band parameter is directly concatenated into the SQL...
CVE-2025-57833
CVE-2025-57833 Example Vulnerable application for CVE-2025–57833 Django 4.2 before 4.2.24 Django 4.2 before 4.2.24, 5.1 before 5.1.12, and 5.2 before 5.2.6 is vulnerable to a SQL injection via Dictionary expansion as kwargs is passed to QuerySet.annotate or QuerySet.alias Currently a work in...
django-connector-CVE-2025-64459-testbed
Django-CVE-2025-64459-Testbed A self-contained testbed for Django CVE-2025-64459. Demonstrates QuerySet.filter parameter injection via dictionary expansion using Docker. About the Vulnerability CVE-2025-64459 is a high-severity vulnerability in Django specifically versions 5.1.14 that allows...
CVE-2026-33033-PoC
CVE-2026-33033 PoC Denial-of-service via base64 whitespace CPU amplification in DjangoMultiPartParser A single 2.5 MB HTTP request can tie up a Django worker for 5 seconds , achieving 2,100x CPU amplification over a normal request of the same size. No authentication is required. Affected Versions...
CVE-2026-33149-PoC
CVE-2026-33149 — Host Header Injection in Tandoor Recipes Summary Tandoor Recipes sets ALLOWEDHOSTS = '' by default in settings.py, causing Django to accept any value in the HTTP Host header without validation. The application uses request.buildabsoluteuri to generate absolute URLs in multiple...
PYSEC-2026-4047 djust has an authorization bypass on the WebSocket/SSE mount path
Impact The live WebSocket transport authorizes a mount via checkviewauth, not Django's View.dispatch chain. As a result, standard Django authorization — LoginRequiredMixin, PermissionRequiredMixin, UserPassesTestMixin, @methoddecoratorloginrequired, name="dispatch", and custom dispatch guards — a...
djust has an authorization bypass on the WebSocket/SSE mount path
ImpactThe live WebSocket transport authorizes a mount via checkviewauth, not Django's View.dispatch chain. As a result, standard Django authorization — LoginRequiredMixin, PermissionRequiredMixin, UserPassesTestMixin, @methoddecoratorloginrequired, name="dispatch", and custom dispatch guards — an...
djust's Django model serialization has no sensitive-field denylist: password hashes, privilege flags, and PII on a public view attribute are sent to the client
ImpactWhen a Django Model instance is assigned to a public view attribute, djust serialized it to the client with no sensitive-field denylist — sending fields such as password the hash, privilege flags e.g. isstaff / issuperuser, tokens, and other PII to the browser. Because exposing model object...
PYSEC-2026-4045 djust's Django model serialization has no sensitive-field denylist: password hashes, privilege flags, and PII on a public view attribute are sent to the client
Impact When a Django Model instance is assigned to a public view attribute, djust serialized it to the client with no sensitive-field denylist — sending fields such as password the hash, privilege flags e.g. isstaff / issuperuser, tokens, and other PII to the browser. Because exposing model objec...
PYSEC-2026-4035 Django GeoDjango spatial lookups allow file writes and outbound requests through GDAL raster parsing
An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. GeoDjango spatial lookups optimistically parse the right-hand-side value as a raster by passing it to the django.contrib.gis.gdal.GDALRaster constructor. Any value used in a spatial lookup against a GeometryField or...
Django GeoDjango spatial lookups allow file writes and outbound requests through GDAL raster parsing
An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8.GeoDjango spatial lookups optimistically parse the right-hand-side value as a raster by passing it to the django.contrib.gis.gdal.GDALRaster constructor. Any value used in a spatial lookup against a GeometryField or...
CLSA-2026-1790845807 TuxCare security update for django (2 CVEs)
TuxCare rebuilt django to address 2 CVEs. Fixed in 5.0.post16+tuxcare...
CLSA-2026-1790845756 TuxCare security update for django (2 CVEs)
TuxCare rebuilt django to address 2 CVEs. Fixed in 5.1.post11+tuxcare...
CLSA-2026-1790845039 TuxCare security update for django (2 CVEs)
TuxCare rebuilt django to address 2 CVEs. Fixed in 5.1.4.post8+tuxcare...
CLSA-2026-1790835761 TuxCare security update for django (2 CVEs)
TuxCare rebuilt django to address 2 CVEs. Fixed in 5.1.9.post7+tuxcare...