Linux Distros Unpatched Vulnerability : CVE-2025-48432

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Django 5.2 before 5.2.3, 5.1 before 5.1.11, and 4.2 before 4.2.23. Internal HTTP response logging does not escape request.path, which...

Linux Distros Unpatched Vulnerability : CVE-2023-24580

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Multipart Request Parser in Django 3.2 before 3.2.18, 4.0 before 4.0.10, and 4.1 before 4.1.7. Passing certain inputs e.g., an...

Linux Distros Unpatched Vulnerability : CVE-2023-23969

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Django 3.2 before 3.2.17, 4.0 before 4.0.9, and 4.1 before 4.1.6, the parsed values of Accept-Language headers are cached in order to avoid repetitive parsin...

Linux Distros Unpatched Vulnerability : CVE-2024-22513

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - djangorestframework-simplejwt version 5.3.1 and before is vulnerable to information disclosure. A user can access web application resources even after their...

MAL-2025-21279 Malicious code in generator-django-kickstart (npm)

The package generator-django-kickstart was found to contain malicious code...

Malicious code in generator-django-kickstart (npm)

The package generator-django-kickstart was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2025-32873

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Django 4.2 before 4.2.21, 5.1 before 5.1.9, and 5.2 before 5.2.1. The django.utils.html.striptags function is vulnerable to a potenti...

Django: SQL Injection when using FilteredRelation

A SQL injection vulnerability was discovered in the Django framework when using the FilteredRelation feature. The vulnerability was located in the tests/filteredrelation/tests.py file. The vulnerability allowed an attacker to inject malicious SQL code through the userdata parameter used in the...

The vulnerability of the Django web application software, related to deficiencies in the error reporting mechanism, allows attackers to compromise the confidentiality of protected information.

The vulnerability of the Django web application framework is related to shortcomings in the error reporting mechanism. Exploiting this vulnerability allows an attacker to compromise the confidentiality of the information being protected...

Improper Control of Interaction Frequency

Overview django-smart-ratelimit is an A flexible and efficient rate limiting library for Django applications Affected versions of this package are vulnerable to Improper Control of Interaction Frequency via counter.save function that does not implement atomic increments. In the fixed-window backe...

The vulnerability of the CSV file processor in the Django web development software platform allows a hacker to execute arbitrary code.

The vulnerability of the Django web application development platform’s CSV file processor is related to an incorrect path limitation for the restricted access directory. Exploiting this vulnerability allows a malicious actor to inject arbitrary code by introducing it into a specially crafted CSV...

ROS-20250729-01

A vulnerability in the django.utils.html.urlize function of the Django web application software platform is related to an incorrect resource cleanup or release. Exploitation of the vulnerability could allow an attacker, acting remotely, to cause a denial of service A vulnerability in the Django w...

WebMap

This is an exploit module/toolkit targeting WebMap, a web dashboard for Nmap XML reports. The primary CVE ID is not explicitly mentioned, but the code and context suggest it is related to a vulnerability in the Django framework used by WebMap. The probable entry point is the rmNotes function in...

Security update for python-Django (moderate)

openSUSE Security Update: Security update for python-Django Announcement ID: openSUSE-SU-2025:0198-1 Rating: moderate References: 1244095 Cross-References: CVE-2025-48432 CVSS scores: CVE-2025-48432 SUSE: 6.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:H/SA:N Affected Products:...

Security update for python-Django (moderate)

openSUSE Security Update: Security update for python-Django Announcement ID: openSUSE-SU-2025:0240-1 Rating: moderate References: 1244095 Cross-References: CVE-2025-48432 CVSS scores: CVE-2025-48432 SUSE: 6.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:H/SA:N Affected Products:...

The vulnerability of the django.utils.html.strip_tags() function in the Django web application framework allows a attacker to cause a denial-of-service attack.

The vulnerability of the django.utils.html.striptags function in the Django web application framework is related to memory leaks caused by the improper use of this function for releasing resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Django web application software, related to insufficient validation of input data, allows attackers to trigger service failures.

The vulnerability of the Django web application framework is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Cross-site Scripting (XSS)

Overview suitable-django-autocomplete is an A suitable Django autocomplete widget using web components Affected versions of this package are vulnerable to Cross-site Scripting XSS via the ModelAutocompleteView class due to insufficient output encoding in the autocomplete functionality. The...

openSUSE Security Advisory (SUSE-SU-2025:02248-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15 / openSUSE 15 Security Update : python-Django (SUSE-SU-2025:02248-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:02248-1 advisory. - CVE-2025-48432: Add an additional hardening for CVE-2025-48432 bsc1244095 Tenable has extracted the preceding description block directl...