vulnwire

All · Django

Newest first. Every filter here is also a feed: see the subscribe box.

  1. 5.3med
    CVE-2026-114582Server-side request forgery via SpatialReference string input
    Django
    3 d ago
  2. 2.2low
    CVE-2026-113733Password hash disclosure to "view only" admin users with custom user models
    Django
    3 d ago
  3. 3.1low
    CVE-2026-113593Potential exposure of private data via empty and missing Vary headers
    Django
    3 d ago
  4. 5.3med
    CVE-2026-111362Server-side request forgery via crs member of GeoJSON geometries
    Django
    3 d ago
  5. 5.3med
    CVE-2026-111211Potential log injection via unescaped geometry form values
    Django
    3 d ago
  6. 5.3med
    CVE-2026-108147Potential memory exhaustion in MultiPartParser via base64-encoded file upload
    Django
    3 d ago
  7. 4.3med
    CVE-2026-87975Privilege abuse in model formsets with editable primary keys
    Django
    31 d ago
  8. 5.3med
    CVE-2026-87890Potential request forgery via spatial lookup byte values
    Django
    31 d ago
  9. 5.3med
    CVE-2026-84429Potential denial-of-service vulnerability in HTTP header parsing
    Django
    31 d ago
  10. 5.3med
    CVE-2026-77050Potential denial-of-service vulnerability in get_supported_language_variant()
    Django
    31 d ago
  11. 6.1med
    CVE-2026-15920Potential cross-site scripting via URLField values in the admin
    Django
    3 mo ago
  12. 5.3med
    CVE-2026-15830Potential denial-of-service vulnerability via nested geometry collections
    Djangopypi
    3 mo ago
  13. 5.3med
    CVE-2026-15337Potential denial-of-service vulnerability in check_for_language()
    Django
    3 mo ago
  14. 8.8high
    CVE-2026-15307Server-side file-write and request forgery via spatial lookups
    Djangopypi
    3 mo ago
  15. 6.1med
    CVE-2026-53878Header injection possibility since DomainNameValidator accepted newlines in input
    Djangopypi
    4 mo ago
  16. 4.8med
    CVE-2026-53877Heap buffer over-read in GDALRaster
    Djangopypi
    4 mo ago
  17. 4.2med
    CVE-2026-48588Potential exposure of private data via cached Set-Cookie response
    Djangopypi
    4 mo ago
  18. 3.1low
    CVE-2026-48587Potential exposure of private data via whitespace padding in Vary header
    Djangopypi
    5 mo ago
  19. 3.1low
    CVE-2026-35193Potential exposure of private data via missing Vary: Authorization in UpdateCacheMiddleware
    Djangopypi
    5 mo ago
  20. 3.1low
    CVE-2026-8404Potential exposure of private data via case-sensitive Cache-Control directives in UpdateCacheMiddleware
    Djangopypi
    5 mo ago
  21. 3.1low
    CVE-2026-7666Potential unencrypted email transmission via STARTTLS in the SMTP backend
    Djangopypi
    5 mo ago
  22. 3.1low
    CVE-2026-6873Signed cookie salt namespace collision in django.http.HttpRequest.get_signed_cookie
    Djangopypi
    5 mo ago
  23. 6.5med
    CVE-2026-35192Session fixation via public cached pages and SESSION_SAVE_EVERY_REQUEST
    Djangopypi
    6 mo ago
  24. 4.3med
    CVE-2026-6907Potential exposure of private data due to incorrect handling of Vary: * in UpdateCacheMiddleware
    Djangopypi
    6 mo ago
  25. 5.3med
    CVE-2026-5766Potential denial-of-service vulnerability in ASGI requests via file upload limit bypass
    Djangopypi
    6 mo ago
  26. 7.5high
    CVE-2026-33034Potential denial-of-service vulnerability in ASGI requests via memory upload limit bypass
    Djangopypi
    7 mo ago
  27. 6.5med
    CVE-2026-33033Potential denial-of-service vulnerability in MultiPartParser via base64-encoded file upload
    Djangopypi
    7 mo ago
  28. 2.7low
    CVE-2026-4292Privilege abuse in ModelAdmin.list_editable
    Djangopypi
    7 mo ago
  29. 9.8crit
    CVE-2026-4277Privilege abuse in GenericInlineModelAdmin
    Djangopypi
    7 mo ago
  30. 7.5high
    CVE-2026-3902ASGI header spoofing via underscore/hyphen conflation
    Djangopypi
    7 mo ago