CVE-2026-15337

A flaw was found in Django. A remote attacker could trigger a denial-of-service DoS condition by sending many distinct, very long language codes to the django.utils.translation.checkforlanguage function. These codes are stored in an in-memory cache, leading to excessive memory consumption. While...

GHSA-7P8R-X3MC-P8W7 vulnerabilities

Vulnerabilities for packages: gemini-cli, gitlab-rails-ce, yaml-language-server, jupyter-base-notebook, nextcloud-server, unleash-proxy, saf, renovate, langfuse-fips, prism, commercial-gitlab-rails-ee-fips, librechat, gitlab-rails-ce-fips, vitess, commercial-gitlab-rails-ee, langfuse,...

CVE-2026-18446 vulnerabilities

Vulnerabilities for packages: gemini-cli, gitlab-rails-ce, yaml-language-server, jupyter-base-notebook, nextcloud-server, unleash-proxy, saf, renovate, langfuse-fips, prism, commercial-gitlab-rails-ee-fips, librechat, gitlab-rails-ce-fips, vitess, commercial-gitlab-rails-ee, langfuse,...

GHSA-7P8R-X3MC-P8W7 vulnerabilities

Vulnerabilities for packages: yaml-language-server, jupyter-base-notebook, prism, saf, argo-workflows, renovate, langfuse, serve, opensearch-dashboards, vitess...

CVE-2026-18446 vulnerabilities

Vulnerabilities for packages: yaml-language-server, jupyter-base-notebook, prism, saf, argo-workflows, renovate, langfuse, serve, opensearch-dashboards, vitess...

CVE-2026-69704

Atals-Livre contains a SQL injection vulnerability that allows attackers to manipulate database queries by passing unsanitized input through a GET parameter to the supp deletion helper function. Attackers can inject malicious SQL syntax via the vulnerable GET parameter to perform unauthorized...

Memory Allocation with Excessive Size Value

Overview Django is a high-level Python Web framework that encourages rapid development and clean, pragmatic design. Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value via the checkforlanguage function. An attacker can exhaust system memory by submittin...

CVE-2026-15337

An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. django.utils.translation.checkforlanguage is subject to a potential denial-of-service attack when given many distinct, very long language codes, which are retained as keys in an in-memory cache and consume process memory...

UBUNTU-CVE-2026-15337

An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. django.utils.translation.checkforlanguage is subject to a potential denial-of-service attack when given many distinct, very long language codes, which are retained as keys in an in-memory cache and consume process memory...

CVE-2026-15337

An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. django.utils.translation.checkforlanguage is subject to a potential denial-of-service attack when given many distinct, very long language codes, which are retained as keys in an in-memory cache and consume process memory...

CVE-2026-64631

A vulnerability allowing a low-privileged user to inject SQL and extract database contents...

EUVD-2026-52757

A vulnerability allowing a low-privileged user to inject SQL and extract database contents...

CVE-2026-15337

An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. django.utils.translation.checkforlanguage is subject to a potential denial-of-service attack when given many distinct, very long language codes, which are retained as keys in an in-memory cache and consume process memory...

CVE-2026-15337 Potential denial-of-service vulnerability in check_for_language()

An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. django.utils.translation.checkforlanguage is subject to a potential denial-of-service attack when given many distinct, very long language codes, which are retained as keys in an in-memory cache and consume process memory...

CVE-2026-15337 Potential denial-of-service vulnerability in check_for_language()

An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. django.utils.translation.checkforlanguage is subject to a potential denial-of-service attack when given many distinct, very long language codes, which are retained as keys in an in-memory cache and consume process memory...

EUVD-2026-52748

An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. django.utils.translation.checkforlanguage is subject to a potential denial-of-service attack when given many distinct, very long language codes, which are retained as keys in an in-memory cache and consume process memory...

CVE-2026-15337 Potential denial-of-service vulnerability in check_for_language()

An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. django.utils.translation.checkforlanguage is subject to a potential denial-of-service attack when given many distinct, very long language codes, which are retained as keys in an in-memory cache and consume process memory...

CVE-2026-15337

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2026-15337

An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. django.utils.translation.checkforlanguage is subject to a potential denial-of-service attack when given many distinct, very long language codes, which are retained as keys in an in-memory cache and consume process memory...

CVE-2026-18801 Stored Clickhouse SQL Injection Through Customer Usage Attribution

OpenMeter contains a stored, or second-order, SQL injection vulnerability in the handling of customer usage-attribution values. An attacker who can create or update a customer can store a malicious value in the usageAttribution.key or usageAttribution.subjectKeys fields. When that customer is...