CVE-2026-73531 django-helpdesk < 2.3.3 Stored XSS via HTML Attachments

django-helpdesk before 2.3.3 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject arbitrary JavaScript by submitting HTML-formatted email messages or uploading .html/.htm file attachments through public ticket submission channels. Attackers can...

CVE-2026-73531 django-helpdesk < 2.3.3 Stored XSS via HTML Attachments

django-helpdesk before 2.3.3 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject arbitrary JavaScript by submitting HTML-formatted email messages or uploading .html/.htm file attachments through public ticket submission channels. Attackers can...

CLSA-2026-1786616143 TuxCare security update for django (1 CVE)

TuxCare rebuilt django to address 1 CVE. Fixed in 5.1.9.post2+tuxcare...

CLSA-2026-1786616142 TuxCare security update for django (1 CVE)

TuxCare rebuilt django to address 1 CVE. Fixed in 5.0.post6+tuxcare...

CLSA-2026-1786616091 TuxCare security update for django (1 CVE)

TuxCare rebuilt django to address 1 CVE. Fixed in 5.1.4.post2+tuxcare...

CLSA-2026-1786616023 TuxCare security update for django (2 CVEs)

TuxCare rebuilt django to address 2 CVEs. Fixed in 5.1.post4+tuxcare...

CLSA-2026-1786604588 TuxCare security update for django (1 CVE)

TuxCare rebuilt django to address 1 CVE. Fixed in 5.0.2.post3+tuxcare...

CLSA-2026-1786600198 TuxCare security update for django (1 CVE)

TuxCare rebuilt django to address 1 CVE. Fixed in 5.1.10.post1+tuxcare...

CLSA-2026-1786600187 TuxCare security update for django (1 CVE)

TuxCare rebuilt django to address 1 CVE. Fixed in 5.0.2.post2+tuxcare...

PT-2026-71798

Name of the Vulnerable Software and Affected Versions django-helpdesk versions prior to 2.3.3 Description A stored cross-site scripting issue allows unauthenticated attackers to inject arbitrary JavaScript. This is achieved by submitting HTML-formatted email messages or uploading .html or .htm fi...

PT-2026-80145

TuxCare rebuilt django to address 2 CVEs. Fixed in 5.1.post4+tuxcare...

PT-2026-80148

TuxCare rebuilt django to address 1 CVE. Fixed in 5.1.9.post2+tuxcare...

PT-2026-80147

TuxCare rebuilt django to address 1 CVE. Fixed in 5.0.post6+tuxcare...

PT-2026-80146

TuxCare rebuilt django to address 1 CVE. Fixed in 5.1.4.post2+tuxcare...

PT-2026-80135

TuxCare rebuilt django to address 1 CVE. Fixed in 5.1.10.post1+tuxcare...

CVE-2026-73531: Improper Neutralization of Input During Web Page Generation

django-helpdesk before 2.3.3 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject arbitrary JavaScript by submitting HTML-formatted email messages or uploading .html/.htm file attachments through public ticket submission channels. Attackers can...

PT-2026-80137

TuxCare rebuilt django to address 1 CVE. Fixed in 5.0.2.post3+tuxcare...

PT-2026-80134

TuxCare rebuilt django to address 1 CVE. Fixed in 5.0.2.post2+tuxcare...

[SECURITY] [DLA 4736-1] python-django security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4736-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb August 12, 2026 https://wiki.debian.org/LTS -...

CVE-2026-73229

A flaw was found in Django REST framework. The AdminRenderer component, when processing an invalid write request, can improperly invoke a GET request without adequate permission checks. This oversight allows an unauthenticated attacker to access data that they are not authorized to view, leading ...