Advisories · Technology
Django.
Every CVE that names Django among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
Server-side request forgery via SpatialReference string input
- Django
- Server-side request forgery (SSRF)
- CVSS 2.1 Low
Password hash disclosure to "view only" admin users with custom user models
- Django
- Hard-coded credentials
- CVSS 2.3 Low
Potential exposure of private data via empty and missing Vary headers
- Django
- CWE-524
- CVSS 6.9 Medium
Server-side request forgery via crs member of GeoJSON geometries
- Django
- Server-side request forgery (SSRF)
- CVSS 6.9 Medium
Potential log injection via unescaped geometry form values
- Django
- Other injection
- CVSS 6.9 Medium
Potential memory exhaustion in MultiPartParser via base64-encoded file upload
- Django
- Denial of service
- CVSS 5.3 Medium
Privilege abuse in model formsets with editable primary keys
- Django
- Broken access control
- CVSS 6.9 Medium
Potential request forgery via spatial lookup byte values
- Django
- Server-side request forgery (SSRF)
- CVSS 6.9 Medium
Potential denial-of-service vulnerability in HTTP header parsing
- Django
- Denial of service
- CVSS 6.9 Medium
Potential denial-of-service vulnerability in get_supported_language_variant()
- Django
- Denial of service
- CVSS 5.1 Medium
Potential cross-site scripting via URLField values in the admin
- Django
- Cross-site scripting (XSS)
- CVSS 6.9 Medium
Potential denial-of-service vulnerability in check_for_language()
- Django
- Denial of service