8882 matches found
PT-2026-73529
TuxCare rebuilt django to address 2 CVEs. Fixed in 5.0.1.post2+tuxcare...
PT-2026-73524
TuxCare rebuilt django to address 2 CVEs. Fixed in 4.0.post2+tuxcare...
PT-2026-73533
TuxCare rebuilt django to address 3 CVEs. Fixed in 4.0.post3+tuxcare...
PT-2026-73507
TuxCare rebuilt django to address 1 CVE. Fixed in 5.1.9.post1+tuxcare...
PT-2026-73496
TuxCare rebuilt django to address 4 CVEs. Fixed in 5.0.1.post1+tuxcare...
PT-2026-67752
Name of the Vulnerable Software and Affected Versions Django versions 5.2 through 5.2.16 Django versions 6.0 through 6.0.7 Description GeoDjango's django.contrib.gis.geos.GEOSGeometry is subject to a denial-of-service when parsing deeply nested GEOMETRYCOLLECTION objects provided as well-known te...
PT-2026-75441
TuxCare rebuilt django to address 1 CVE. Fixed in 4.0.post7+tuxcare...
CVE-2026-15337: Memory Allocation with Excessive Size Value
An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. django.utils.translation.checkforlanguage is subject to a potential denial-of-service attack when given many distinct, very long language codes, which are retained as keys in an in-memory cache and consume process memory...
PT-2026-73602
TuxCare rebuilt django to address 1 CVE. Fixed in 4.2.post1+tuxcare...
CVE-2026-18818: Authorization Bypass Through User-Controlled Key
A weakness has been identified in Ehco1996 django-sspanel up to 2023.12.26. This affects the function TicketDetailView of the file apps/sspanel/views.py of the component Support Ticket Handler. Executing a manipulation can lead to authorization bypass. The attack can be executed remotely. The...
Linux Distros Unpatched Vulnerability : CVE-2026-15307
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. GeoDjango spatial lookups optimistically parse the right-hand-side value as a raster b...
PT-2026-73506
TuxCare rebuilt django to address 1 CVE. Fixed in 5.1.4.post1+tuxcare...
CVE-2026-15920: Improper Neutralization of Script in Attributes in a Web Page
An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. django.contrib.admin.utils.displayforfield renders URLField values as clickable links in the admin without validating the URL. A value stored with an unsafe scheme is displayed as a link on changelist and read-only admin...
PT-2026-73525
TuxCare rebuilt django to address 1 CVE. Fixed in 5.1.post1+tuxcare...
PT-2026-73558
TuxCare rebuilt django to address 1 CVE. Fixed in 5.0.post5+tuxcare...
PT-2026-73587
TuxCare rebuilt django to address 2 CVEs. Fixed in 5.1.post2+tuxcare...
PT-2026-73537
TuxCare rebuilt django to address 1 CVE. Fixed in 5.0.post2+tuxcare...
PT-2026-73539
TuxCare rebuilt django to address 1 CVE. Fixed in 5.0.post3+tuxcare...