Latest vulnerabilities for vendor "djangoproject"

Where

Sort:

Software

djangoproject django

Django DjangoSession fixation via public cached pages and SESSION_SAVE_EVERY_REQUEST

Risk 39

Severity

2.3

First published (updated )

CVE-2026-35192

djangoproject DjangoPotential exposure of private data due to incorrect handling of Vary: * in UpdateCacheMiddleware

Risk 20

Severity

2.3

EPSS

0.03%

First published (updated )

CVE-2026-6907

djangoproject DjangoPotential denial-of-service vulnerability in ASGI requests via file upload limit bypass

Risk 30

Severity

6.3

First published (updated )

CVE-2026-5766

pip/DjangoPotential denial-of-service vulnerability in ASGI requests via memory upload limit bypass

Risk 46

Severity

7.5

First published (updated )

CVE-2026-33034

pip/DjangoPotential denial-of-service vulnerability in MultiPartParser via base64-encoded file upload

Risk 40

Severity

6.5

First published (updated )

CVE-2026-33033

pip/DjangoPrivilege abuse in ModelAdmin.list_editable

Risk 12

Severity

2.7

EPSS

0.01%

First published (updated )

CVE-2026-4292

pip/DjangoPrivilege abuse in GenericInlineModelAdmin

Risk 63

Severity

9.8

EPSS

0.01%

First published (updated )

CVE-2026-4277

pip/DjangoASGI header spoofing via underscore/hyphen conflation

Risk 46

Severity

7.5

First published (updated )

CVE-2026-3902

pypi/djangoPotential incorrect permissions on newly created file system objects

Risk 21

Severity

3.7

First published (updated )

CVE-2026-25674

pypi/djangoPotential denial-of-service vulnerability in URLField via Unicode normalization on Windows

Risk 46

Severity

7.5

First published (updated )

CVE-2026-25673

pip/DjangoPotential denial-of-service vulnerability via repeated headers when using ASGI

Risk 46

Severity

7.5

First published (updated )

CVE-2025-14550

pip/DjangoPotential SQL injection via QuerySet.order_by and FilteredRelation

Risk 37

Severity

5.4

First published (updated )

CVE-2026-1312

pip/DjangoPotential SQL injection in column aliases via control characters

Risk 37

Severity

5.4

First published (updated )

CVE-2026-1287

pip/DjangoPotential denial-of-service vulnerability in django.utils.text.Truncator HTML methods

Risk 46

Severity

7.5

First published (updated )

CVE-2026-1285

pypi/djangoPotential SQL injection via raster lookups on PostGIS

Risk 37

Severity

5.4

First published (updated )

CVE-2026-1207

pip/DjangoUsername enumeration through timing difference in mod_wsgi authentication handler

Risk 34

Severity

5.3

First published (updated )

CVE-2025-13473

pip/DjangoPotential denial-of-service vulnerability in XML serializer text extraction

Risk 46

Severity

7.5

First published (updated )

CVE-2025-64460

pip/DjangoPotential SQL injection in FilteredRelation column aliases on PostgreSQL

Risk 23

Severity

4.3

First published (updated )

CVE-2025-13372

Django DjangoPotential SQL injection via _connector keyword argument in QuerySet and Q objects

Risk 76

Severity

9.1

Exploited

First published (updated )

CVE-2025-64459

pip/djangoPotential denial-of-service vulnerability in HttpResponseRedirect and HttpResponsePermanentRedirect on Windows

Risk 46

Severity

7.5

First published (updated )

CVE-2025-64458

Django DjangoDjango CVE-2025-59681 and CVE-2025-59682

Risk 41

Severity

6.5

First published (updated )

CVE-2025-59682

Django DjangoDjango CVE-2025-59681 and CVE-2025-59682

Risk 92

Severity

9.8

First published (updated )

CVE-2025-59681

pip/DjangoDjango: Potential SQL injection in Filtedlation column aliases

Risk 80

Severity

8.1

First published (updated )

CVE-2025-57833

Django DjangoDjango: Potential log injection via unescaped quest path

Risk 20

Severity

5.3

EPSS

0.05%

First published (updated )

CVE-2025-48432

pip/DjangoDjango: Denial-of-service possibility in strip_tags()

Risk 37

Severity

7.5

First published (updated )

CVE-2025-32873

Django DjangoDjango: Potential DoS in LoginView, LogoutView, and set_language() on Windows

Risk 46

Severity

7.5

First published (updated )

CVE-2025-27556

Django DjangoDjango: Potential denial-of-service in django.utils.text.wrap()

Risk 32

Severity

7.5

EPSS

0.06%

First published (updated )

CVE-2025-26699

pip/DjangoDjango: Potential denial-of-service vulnerability in IPv6 validation

Risk 46

Severity

7.5

First published (updated )

CVE-2024-56374

pip/djangoDjango CVE-2024-53907 and CVE-2024-53908

Risk 46

Severity

7.5

First published (updated )

CVE-2024-53907

pip/djangoDjango CVE-2024-53907 and CVE-2024-53908

Risk 92

Severity

9.8

First published (updated )

CVE-2024-53908

Trending

Vendor Risk Score

Software

Django DjangoSession fixation via public cached pages and SESSION_SAVE_EVERY_REQUEST

djangoproject DjangoPotential exposure of private data due to incorrect handling of Vary: * in UpdateCacheMiddleware

djangoproject DjangoPotential denial-of-service vulnerability in ASGI requests via file upload limit bypass

pip/DjangoPotential denial-of-service vulnerability in ASGI requests via memory upload limit bypass

pip/DjangoPotential denial-of-service vulnerability in MultiPartParser via base64-encoded file upload

Don't miss critical vulnerabilities

pip/DjangoPrivilege abuse in ModelAdmin.list_editable

pip/DjangoPrivilege abuse in GenericInlineModelAdmin

pip/DjangoASGI header spoofing via underscore/hyphen conflation

pypi/djangoPotential incorrect permissions on newly created file system objects

pypi/djangoPotential denial-of-service vulnerability in URLField via Unicode normalization on Windows

Don't miss critical vulnerabilities

pip/DjangoPotential denial-of-service vulnerability via repeated headers when using ASGI

pip/DjangoPotential SQL injection via QuerySet.order_by and FilteredRelation

pip/DjangoPotential SQL injection in column aliases via control characters

pip/DjangoPotential denial-of-service vulnerability in django.utils.text.Truncator HTML methods

pypi/djangoPotential SQL injection via raster lookups on PostGIS

Don't miss critical vulnerabilities

pip/DjangoUsername enumeration through timing difference in mod_wsgi authentication handler

pip/DjangoPotential denial-of-service vulnerability in XML serializer text extraction

pip/DjangoPotential SQL injection in FilteredRelation column aliases on PostgreSQL

Django DjangoPotential SQL injection via _connector keyword argument in QuerySet and Q objects

pip/djangoPotential denial-of-service vulnerability in HttpResponseRedirect and HttpResponsePermanentRedirect on Windows

Don't miss critical vulnerabilities

Django DjangoDjango CVE-2025-59681 and CVE-2025-59682

Django DjangoDjango CVE-2025-59681 and CVE-2025-59682

pip/DjangoDjango: Potential SQL injection in Filtedlation column aliases

Django DjangoDjango: Potential log injection via unescaped quest path

pip/DjangoDjango: Denial-of-service possibility in strip_tags()

Don't miss critical vulnerabilities

Django DjangoDjango: Potential DoS in LoginView, LogoutView, and set_language() on Windows

Django DjangoDjango: Potential denial-of-service in django.utils.text.wrap()

pip/DjangoDjango: Potential denial-of-service vulnerability in IPv6 validation

pip/djangoDjango CVE-2024-53907 and CVE-2024-53908

pip/djangoDjango CVE-2024-53907 and CVE-2024-53908

Don't miss critical vulnerabilities

Company

Resources

Contact