8882 matches found
PT-2026-67888
Name of the Vulnerable Software and Affected Versions Ehco1996 django-sspanel versions prior to 2023.12.26 Description A weakness in the Support Ticket Handler component allows for a remote authorization bypass. This issue occurs within the TicketDetailView function located in the...
PT-2026-80683
An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. GeoDjango's django.contrib.gis.geos.GEOSGeometry is subject to a potential denial-of-service when parsing deeply nested GEOMETRYCOLLECTION objects supplied as well-known text WKT, well-known binary WKB, or hex-encoded WKB,...
PT-2026-73520
TuxCare rebuilt django to address 2 CVEs. Fixed in 4.0.post1+tuxcare...
PT-2026-73584
TuxCare rebuilt django to address 1 CVE. Fixed in 4.0.post5+tuxcare...
PT-2026-67752
Name of the Vulnerable Software and Affected Versions Django versions 5.2 through 5.2.16 Django versions 6.0 through 6.0.7 Description GeoDjango's django.contrib.gis.geos.GEOSGeometry is subject to a denial-of-service when parsing deeply nested GEOMETRYCOLLECTION objects provided as well-known te...
PT-2026-75441
TuxCare rebuilt django to address 1 CVE. Fixed in 4.0.post7+tuxcare...
CVE-2026-15337: Memory Allocation with Excessive Size Value
An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. django.utils.translation.checkforlanguage is subject to a potential denial-of-service attack when given many distinct, very long language codes, which are retained as keys in an in-memory cache and consume process memory...
PT-2026-73602
TuxCare rebuilt django to address 1 CVE. Fixed in 4.2.post1+tuxcare...
CVE-2026-18818: Authorization Bypass Through User-Controlled Key
A weakness has been identified in Ehco1996 django-sspanel up to 2023.12.26. This affects the function TicketDetailView of the file apps/sspanel/views.py of the component Support Ticket Handler. Executing a manipulation can lead to authorization bypass. The attack can be executed remotely. The...
CVE-2026-15920: Improper Neutralization of Script in Attributes in a Web Page
An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. django.contrib.admin.utils.displayforfield renders URLField values as clickable links in the admin without validating the URL. A value stored with an unsafe scheme is displayed as a link on changelist and read-only admin...
PT-2026-73530
TuxCare rebuilt django to address 1 CVE. Fixed in 5.0.1.post3+tuxcare...
PT-2026-73529
TuxCare rebuilt django to address 2 CVEs. Fixed in 5.0.1.post2+tuxcare...
Linux Distros Unpatched Vulnerability : CVE-2026-15920
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. django.contrib.admin.utils.displayforfield renders URLField values as clickable links ...
Linux Distros Unpatched Vulnerability : CVE-2026-15307
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. GeoDjango spatial lookups optimistically parse the right-hand-side value as a raster b...
PT-2026-73603
TuxCare rebuilt django to address 3 CVEs. Fixed in 5.1.post3+tuxcare...
PT-2026-73596
TuxCare rebuilt django to address 1 CVE. Fixed in 4.0.post6+tuxcare...
PT-2026-73505
TuxCare rebuilt django to address 1 CVE. Fixed in 5.0.2.post1+tuxcare...
PT-2026-67753
Name of the Vulnerable Software and Affected Versions Django versions 5.2 through 5.2.16 Django versions 6.0 through 6.0.7 Description An issue exists where django.contrib.admin.utils.display for field renders URLField values as clickable links in the admin interface without proper validation. Th...