16024 matches found
EUVD-2026-56887
Django REST framework: Potential bypass of Django DATAUPLOADMAXMEMORYSIZE when parsing oversized JSON and urlencoded request bodies via DRF request.data...
EUVD-2026-56888
Django REST framework: AdminRenderer may disclose GET-protected data when rendering invalid write requests...
Django REST framework: AdminRenderer may disclose GET-protected data when rendering invalid write requests
Summary AdminRenderer may disclose data that would normally be protected by GET permissions when rendering a 400 Bad Request response for an invalid write request. If a view allows POST or another write method but denies GET, an invalid request rendered through AdminRenderer can invoke the view's...
GHSA-G47C-3XMW-Q6M2 Django REST framework: AdminRenderer may disclose GET-protected data when rendering invalid write requests
Summary AdminRenderer may disclose data that would normally be protected by GET permissions when rendering a 400 Bad Request response for an invalid write request. If a view allows POST or another write method but denies GET, an invalid request rendered through AdminRenderer can invoke the view's...
CVE-2026-16206
A flaw was found in django-oauth-toolkit. A remote attacker can exploit a vulnerability in the loadidtoken function to manipulate session handling, leading to session expiration. This can result in a denial of service for affected users by prematurely ending their active sessions...
CVE-2026-82835
A weakness has been identified in caoqianming django-vue-admin 1.0. This vulnerability affects unknown code of the file /api/file/. Executing a manipulation of the argument fileid can lead to improper access controls. The attack can be executed remotely. The exploit has been made available to the...
CVE-2026-82835 caoqianming django-vue-admin file access control
A weakness has been identified in caoqianming django-vue-admin 1.0. This vulnerability affects unknown code of the file /api/file/. Executing a manipulation of the argument fileid can lead to improper access controls. The attack can be executed remotely. The exploit has been made available to the...
EUVD-2026-68745
A weakness has been identified in caoqianming django-vue-admin 1.0. This vulnerability affects unknown code of the file /api/file/. Executing a manipulation of the argument fileid can lead to improper access controls. The attack can be executed remotely. The exploit has been made available to the...
CVE-2026-82835
A vulnerability in caoqianming django-vue-admin 1.0 allows improper access control through manipulation of the file_id argument at the /api/file/ endpoint. The attack is executable remotely with low privileges and no user interaction . Exploit code has been made public and is rated as proof-of-co...
CVE-2026-82835 caoqianming django-vue-admin file access control
A weakness has been identified in caoqianming django-vue-admin 1.0. This vulnerability affects unknown code of the file /api/file/. Executing a manipulation of the argument fileid can lead to improper access controls. The attack can be executed remotely. The exploit has been made available to the...
CLSA-2026-1788172688 TuxCare security update for django (3 CVEs)
TuxCare rebuilt django to address 3 CVEs. Fixed in 5.0.1.post6+tuxcare...
CLSA-2026-1788171127 TuxCare security update for django (4 CVEs)
TuxCare rebuilt django to address 4 CVEs. Fixed in 5.1.4.post4+tuxcare...
CLSA-2026-1788170175 TuxCare security update for django (2 CVEs)
TuxCare rebuilt django to address 2 CVEs. Fixed in 4.0.post15+tuxcare...
CLSA-2026-1788169795 TuxCare security update for django (11 CVEs)
TuxCare rebuilt django to address 11 CVEs. Fixed in 5.0.2.post6+tuxcare...
CLSA-2026-1788167080 TuxCare security update for django (5 CVEs)
TuxCare rebuilt django to address 5 CVEs. Fixed in 4.2.post9+tuxcare...
CLSA-2026-1788166978 TuxCare security update for django (6 CVEs)
TuxCare rebuilt django to address 6 CVEs. Fixed in 5.1.10.post3+tuxcare...
CLSA-2026-1788165693 TuxCare security update for django (3 CVEs)
TuxCare rebuilt django to address 3 CVEs. Fixed in 5.0.post8+tuxcare...
PT-2026-89341
TuxCare rebuilt django to address 3 CVEs. Fixed in 5.0.post8+tuxcare...