7508 matches found
PT-2026-45949
Name of the Vulnerable Software and Affected Versions Django versions prior to 5.2.15 Django versions prior to 6.0.6 Description An issue exists in django.middleware.cache.UpdateCacheMiddleware where Cache-Control response directives are not matched case-insensitively. This allows remote attacker...
The vulnerability of the ASGI component of the Django web application framework allows attackers to perform spoofing attacks.
The vulnerability of the ASGI component of the Django web application framework involves bypassing authentication through spoofing. Exploiting this vulnerability allows a malicious actor to carry out spoofing attacks remotely...
The vulnerability of the ASGI request processing mechanism of the Django web application’s software platform allows a hacker to induce a service failure.
The vulnerability of the ASGI request processing mechanism in Django web applications relates to unlimited resource distribution. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Django 安全漏洞
Django is a set of open-source web frameworks based on the Python language, developed by the Django Foundation. This framework includes an object-oriented mapper, view system, template system, etc. Versions of Django prior to 6.0.6 and 5.2.15 contained security vulnerabilities. These...
Linux Distros Unpatched Vulnerability : CVE-2026-48587
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6. django.utils.cache.hasvaryheader in Django does not strip leading or trailing whitespa...
Linux Distros Unpatched Vulnerability : CVE-2026-35193
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6. django.middleware.cache.UpdateCacheMiddleware in Django does not add Authorization to...
PT-2026-45944
Name of the Vulnerable Software and Affected Versions Django versions prior to 5.2.15 Django versions prior to 6.0.6 Description The django.utils.cache.has vary header function does not strip leading or trailing whitespace from Vary response header values before comparison. This allows remote...
Django 安全漏洞
Django is a set of open-source web frameworks based on the Python language, developed by the Django Foundation. This framework includes an object-oriented mapper, view system, template system, etc. Versions of Django prior to 6.0.6 and 5.2.15 contained security vulnerabilities. These...
The vulnerability of the GenericInlineModelAdmin class in the Django web development framework allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the GenericInlineModelAdmin class in the Django web development framework is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
Linux Distros Unpatched Vulnerability : CVE-2026-6873
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Django 6.0 before 6.0.6 and 5.2 before 5.2.15. django.http.HttpRequest.getsignedcookie in Django uses a non-injective salt derivation...
Linux Distros Unpatched Vulnerability : CVE-2026-7666
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Django 6.0 before 6.0.6 and 5.2 before 5.2.15. django.core.mail.backends.smtp.EmailBackend in Django fails to prevent reuse of a...
CVE-2026-42197
RELATE is a web-based courseware package. Versions prior to commit 555f0efb1c5bd7531c07cd73724d7e566a81f620 have a stored cross-site scripting vulnerability that allows any enrolled student to execute arbitrary JavaScript in an administrator's browser session, potentially leading to full admin...
EUVD-2026-32627
RELATE is a web-based courseware package. Versions prior to commit 555f0efb1c5bd7531c07cd73724d7e566a81f620 have a stored cross-site scripting vulnerability that allows any enrolled student to execute arbitrary JavaScript in an administrator's browser session, potentially leading to full admin...
ROS-20260524-73-0050
A vulnerability in the MultiPartParser function of the Django web application software platform is related to algorithmic complexity. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...
CVE-2026-35192 vulnerabilities
Vulnerabilities for packages: py3-django...
GHSA-7H2M-M8VJ-598H vulnerabilities
Vulnerabilities for packages: py3-django...
CVE-2026-5766 vulnerabilities
Vulnerabilities for packages: py3-django...
GHSA-W26R-RMM8-9C29 vulnerabilities
Vulnerabilities for packages: py3-django...