PT-2026-90922

TuxCare rebuilt django to address 2 CVEs. Fixed in 5.0.2.post7+tuxcare...

PT-2026-90923

TuxCare rebuilt django to address 2 CVEs. Fixed in 4.0.post17+tuxcare...

PT-2026-90921

TuxCare rebuilt django to address 5 CVEs. Fixed in 5.0.post10+tuxcare...

PT-2026-90920

TuxCare rebuilt django to address 4 CVEs. Fixed in 5.0.1.post8+tuxcare...

PT-2026-90918

TuxCare rebuilt django to address 3 CVEs. Fixed in 5.1.4.post5+tuxcare...

django-omnibus (>=0.1.0, <=0.2.0) potentially affected by CVE-2026-82397 via tornado (3.1.1)

tornado PYPI version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - django-omnibus =0.1.0, =0.2.0 Source cves: CVE-2026-82397 Source advisory: OSV:GHSA-MPF4-983Q-P7J4...

CLSA-2026-1788348294 TuxCare security update for django (1 CVE)

TuxCare rebuilt django to address 1 CVE. Fixed in 4.0.post16+tuxcare...

CLSA-2026-1788344280 TuxCare security update for django (3 CVEs)

TuxCare rebuilt django to address 3 CVEs. Fixed in 5.1.9.post4+tuxcare...

CLSA-2026-1788343087 TuxCare security update for django (2 CVEs)

TuxCare rebuilt django to address 2 CVEs. Fixed in 5.1.post6+tuxcare...

CLSA-2026-1788340809 TuxCare security update for django (3 CVEs)

TuxCare rebuilt django to address 3 CVEs. Fixed in 5.0.post9+tuxcare...

CLSA-2026-1788335220 TuxCare security update for django (5 CVEs)

TuxCare rebuilt django to address 5 CVEs. Fixed in 5.0.1.post7+tuxcare...

CLSA-2026-1788334218 TuxCare security update for django (1 CVE)

TuxCare rebuilt django to address 1 CVE. Fixed in 4.2.post10+tuxcare...

PT-2026-90670

TuxCare rebuilt django to address 2 CVEs. Fixed in 5.1.post6+tuxcare...

PT-2026-90627

TuxCare rebuilt django to address 1 CVE. Fixed in 4.2.post10+tuxcare...

PT-2026-90629

TuxCare rebuilt django to address 5 CVEs. Fixed in 5.0.1.post7+tuxcare...

PT-2026-90672

TuxCare rebuilt django to address 3 CVEs. Fixed in 5.1.9.post4+tuxcare...

PT-2026-90665

TuxCare rebuilt django to address 3 CVEs. Fixed in 5.0.post9+tuxcare...

PT-2026-90681

TuxCare rebuilt django to address 1 CVE. Fixed in 4.0.post16+tuxcare...

CVE-2026-73229

creationtimestamp| type| source ---|---|--- 2026-09-01 20:35:03+00:00| published-proof-of-concept| https://github.com/encode/django-rest-framework/security/advisories/GHSA-g47c-3xmw-q6m2...

GHSA-2M8G-3CMR-WG3W Django REST framework: Potential bypass of Django `DATA_UPLOAD_MAX_MEMORY_SIZE` when parsing oversized JSON and urlencoded request bodies via DRF `request.data`

Summary While investigating Django REST Framework's request parsing behavior, I identified that DRF's high-level request.data parsing appears to bypass Django's configured DATAUPLOADMAXMEMORYSIZE protection for application/json and application/x-www-form-urlencoded request bodies. In the tested...