8882 matches found
PT-2026-89344
TuxCare rebuilt django to address 5 CVEs. Fixed in 4.2.post9+tuxcare...
PT-2026-89343
TuxCare rebuilt django to address 6 CVEs. Fixed in 5.1.10.post3+tuxcare...
PT-2026-89341
TuxCare rebuilt django to address 3 CVEs. Fixed in 5.0.post8+tuxcare...
PT-2026-83974
A weakness has been identified in caoqianming django-vue-admin 1.0. This vulnerability affects unknown code of the file /api/file/. Executing a manipulation of the argument file id can lead to improper access controls. The attack can be executed remotely. The exploit has been made available to th...
CVE-2026-82835: Improper Access Control
A weakness has been identified in caoqianming django-vue-admin 1.0. This vulnerability affects unknown code of the file /api/file/. Executing a manipulation of the argument fileid can lead to improper access controls. The attack can be executed remotely. The exploit has been made available to the...
python313-djangorestframework-3.18.0-2.1 on GA media (moderate)
python313-djangorestframework-3.18.0-2.1 on GA media Announcement ID: openSUSE-SU-2026:11625-1 Rating: moderate Cross-References: CVE-2026-73228 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in...
OESA-2026-3499 python-django security update
A high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fixes: An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. GeoDjango spatial lookups optimistically parse the right-hand-side value as a raster by passing it to the...
OESA-2026-3498 python-django security update
A high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fixes: An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. GeoDjango spatial lookups optimistically parse the right-hand-side value as a raster by passing it to the...
OESA-2026-3497 python-django security update
A high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fixes: An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. GeoDjango spatial lookups optimistically parse the right-hand-side value as a raster by passing it to the...
OESA-2026-3496 python-django security update
A high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fixes: An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. GeoDjango spatial lookups optimistically parse the right-hand-side value as a raster by passing it to the...
CLSA-2026-1787930548 TuxCare security update for django (7 CVEs)
TuxCare rebuilt django to address 7 CVEs. Fixed in 5.0.2.post5+tuxcare...
CLSA-2026-1787899840 TuxCare security update for django (1 CVE)
TuxCare rebuilt django to address 1 CVE. Fixed in 4.2.post8+tuxcare...
PT-2026-86901
TuxCare rebuilt django to address 7 CVEs. Fixed in 5.0.2.post5+tuxcare...
PT-2026-86743
TuxCare rebuilt django to address 1 CVE. Fixed in 4.2.post8+tuxcare...
The vulnerability of the QuerySet.order_by() function in the Django web application framework allows a hacker to gain access to confidential data and influence the integrity of the data.
The vulnerability of the QuerySet.orderby function in the Django web application framework relates to the lack of security measures for SQL query structures. Exploiting this vulnerability allows an attacker to gain access to sensitive data and compromise data integrity...
MGASA-2026-0339 Updated python-django packages fix security vulnerabilities
CVE-2026-15307: Server-side file-write and request forgery via spatial lookups CVE-2026-15337: Potential denial-of-service vulnerability in checkforlanguage CVE-2026-15830: Potential denial-of-service vulnerability via nested geometry collections CVE-2026-15920: Potential cross-site scripting via...
Updated python-django packages fix security vulnerabilities
CVE-2026-15307: Server-side file-write and request forgery via spatial lookups CVE-2026-15337: Potential denial-of-service vulnerability in checkforlanguage CVE-2026-15830: Potential denial-of-service vulnerability via nested geometry collections CVE-2026-15920: Potential cross-site scripting via...
OPENSUSE-SU-2026:11624-1 python313-django-oauth-toolkit-3.4.1-1.1 on GA media
These are all security issues fixed in the python313-django-oauth-toolkit-3.4.1-1.1 package on the GA media of openSUSE Tumbleweed...