8882 matches found
CLSA-2025-1756858299 TuxCare security update for django (1 CVE)
TuxCare rebuilt django to address 1 CVE. Fixed in 5.0.1.post3+tuxcare...
CLSA-2025-1756944687 TuxCare security update for django (3 CVEs)
TuxCare rebuilt django to address 3 CVEs. Fixed in 4.0.post3+tuxcare...
PT-2026-67750
Name of the Vulnerable Software and Affected Versions Django versions 5.2 through 5.2.16 Django versions 6.0 through 6.0.7 Description GeoDjango spatial lookups optimistically parse the right-hand-side value as a raster by passing it to the django.contrib.gis.gdal.GDALRaster constructor. This...
PT-2026-73541
TuxCare rebuilt django to address 1 CVE. Fixed in 5.0.post4+tuxcare...
CVE-2026-15830: Uncontrolled Recursion
An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. GeoDjango's django.contrib.gis.geos.GEOSGeometry is subject to a potential denial-of-service when parsing deeply nested GEOMETRYCOLLECTION objects supplied as well-known text WKT, well-known binary WKB, or hex-encoded WKB,...
PT-2026-73596
TuxCare rebuilt django to address 1 CVE. Fixed in 4.0.post6+tuxcare...
Linux Distros Unpatched Vulnerability : CVE-2026-15920
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. django.contrib.admin.utils.displayforfield renders URLField values as clickable links ...
Linux Distros Unpatched Vulnerability : CVE-2026-15307
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. GeoDjango spatial lookups optimistically parse the right-hand-side value as a raster b...
Linux Distros Unpatched Vulnerability : CVE-2026-15830
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Django 6.0 before 6.0.9 and 5.2 before 5.2.18. GeoDjango's django.contrib.gis.geos.GEOSGeometry is subject to a potential...
PT-2026-105533
An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. GeoDjango's django.contrib.gis.geos.GEOSGeometry is subject to a potential denial-of-service when parsing deeply nested GEOMETRYCOLLECTION objects supplied as well-known text WKT, well-known binary WKB, or hex-encoded WKB,...
Linux Distros Unpatched Vulnerability : CVE-2026-15337
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. django.utils.translation.checkforlanguage is subject to a potential denial-of-service...
PT-2026-73692
TuxCare rebuilt django to address 2 CVEs. Fixed in 3.2.25.post2+tuxcare...
PT-2026-73540
TuxCare rebuilt django to address 3 CVEs. Fixed in 4.0.post4+tuxcare...
PT-2026-73505
TuxCare rebuilt django to address 1 CVE. Fixed in 5.0.2.post1+tuxcare...
PT-2026-73603
TuxCare rebuilt django to address 3 CVEs. Fixed in 5.1.post3+tuxcare...
CVE-2026-15307: External Control of File Name or Path
An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. GeoDjango spatial lookups optimistically parse the right-hand-side value as a raster by passing it to the django.contrib.gis.gdal.GDALRaster constructor. Any value used in a spatial lookup against a GeometryField or...
PT-2026-105547
An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. GeoDjango spatial lookups optimistically parse the right-hand-side value as a raster by passing it to the django.contrib.gis.gdal.GDALRaster constructor. Any value used in a spatial lookup against a GeometryField or...
PT-2026-67751
Name of the Vulnerable Software and Affected Versions Django versions prior to 5.2.17 Django versions prior to 6.0.8 Description A denial-of-service issue exists in the check for language function within django.utils.translation. The problem occurs when the function receives numerous distinct and...
PT-2026-73535
TuxCare rebuilt django to address 1 CVE. Fixed in 5.0.post1+tuxcare...
PT-2026-67888
Name of the Vulnerable Software and Affected Versions Ehco1996 django-sspanel versions prior to 2023.12.26 Description A weakness in the Support Ticket Handler component allows for a remote authorization bypass. This issue occurs within the TicketDetailView function located in the...