Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-15337 |
|
Vulnerability in django (CVE-2026-15337)
vulnerability in django (CVE-2026-15337). Risk of unauthorized operations or information disclosure. Exploitable via ``DATA_UPLOAD_MAX_MEMORY_SIZE``.
|
| CVE-2026-15920 |
|
Vulnerability in django (CVE-2026-15920)
vulnerability in django (CVE-2026-15920). Risk of unauthorized operations or information disclosure. Exploitable via ``URLField``.
|
| CVE-2026-15307 |
|
Vulnerability in django (CVE-2026-15307)
vulnerability in django (CVE-2026-15307). Successful exploitation can lead to full system takeover. Exploitable via ``django.contrib.gis.gdal.GDALRaster``.
|
| CVE-2026-15830 |
|
Vulnerability in django (CVE-2026-15830)
vulnerability in django (CVE-2026-15830). Risk of unauthorized operations or information disclosure. Exploitable via ``django.contrib.gis.geos.GEOSGeometry``.
|
| CVE-2026-53878 |
|
Vulnerability in django (CVE-2026-53878)
vulnerability in django (CVE-2026-53878). Risk of unauthorized operations or information disclosure. Exploitable via ``DomainNameValidator``. Mitigation: upgrade to `6.0.7` or later.
|
| CVE-2026-53877 |
|
Vulnerability in django (CVE-2026-53877)
vulnerability in django (CVE-2026-53877). Risk of unauthorized operations or information disclosure. Exploitable via ``django.contrib.gis.gdal.GDALRaster``. Mitigation: upgrade to `6.0.7` or later.
|
| CVE-2026-48588 |
|
Vulnerability in django (CVE-2026-48588)
vulnerability in django (CVE-2026-48588). Risk of unauthorized operations or information disclosure. Exploitable via ``UpdateCacheMiddleware``. Mitigation: upgrade to `6.0.7` or later.
|
| CVE-2026-8404 |
|
Vulnerability in django (CVE-2026-8404)
vulnerability in django (CVE-2026-8404). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.2.15, 6.0.6` or later.
|
| CVE-2026-7666 |
|
Vulnerability in django (CVE-2026-7666)
vulnerability in django (CVE-2026-7666). Risk of unauthorized operations or information disclosure. Exploitable via ``STARTTLS``. Mitigation: upgrade to `5.2.15, 6.0.6` or later.
|
| CVE-2026-6873 |
|
Vulnerability in django (CVE-2026-6873)
vulnerability in django (CVE-2026-6873). Risk of unauthorized operations or information disclosure. Exploitable via ``django.http.HttpRequest.get_signed_cookie``. Mitigation: upgrade to `5.2.15, 6.0.6` or later.
|
| CVE-2026-48587 |
|
Vulnerability in django (CVE-2026-48587)
vulnerability in django (CVE-2026-48587). Risk of unauthorized operations or information disclosure. Exploitable via ``Vary``. Mitigation: upgrade to `5.2.15, 6.0.6` or later.
|
| CVE-2026-44546 |
|
Vulnerability in daphne (CVE-2026-44546)
vulnerability in daphne (CVE-2026-44546). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.2.2` or later.
|
| CVE-2026-44545 |
|
Vulnerability in daphne (CVE-2026-44545)
vulnerability in daphne (CVE-2026-44545). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.2.2` or later.
|
| CVE-2026-35193 |
|
Vulnerability in django (CVE-2026-35193)
vulnerability in django (CVE-2026-35193). Risk of unauthorized operations or information disclosure. Exploitable via ``Authorization``. Mitigation: upgrade to `5.2.15, 6.0.6` or later.
|
| CVE-2026-25673 |
|
Vulnerability in django (CVE-2026-25673)
vulnerability in django (CVE-2026-25673). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-1312 |
|
SQL Injection in django (CVE-2026-1312)
SQL injection in django (CVE-2026-1312). Risk of unauthorized operations or information disclosure. Exploitable via ``FilteredRelation``. Mitigation: upgrade to `4.2.28, 5.2.11, 6.0.2` or later.
|
| CVE-2026-1287 |
|
SQL Injection in django (CVE-2026-1287)
SQL injection in django (CVE-2026-1287). Risk of unauthorized operations or information disclosure. Exploitable via ``FilteredRelation``. Mitigation: upgrade to `4.2.28, 5.2.11, 6.0.2` or later.
|
| CVE-2026-1207 |
|
SQL Injection in django (CVE-2026-1207)
SQL injection in django (CVE-2026-1207). Risk of unauthorized operations or information disclosure. Exploitable via ``RasterField``. Mitigation: upgrade to `4.2.28, 5.2.11, 6.0.2` or later.
|
| CVE-2017-12794 |
|
Cross-Site Scripting (XSS) in django (CVE-2017-12794)
cross-site scripting in django (CVE-2017-12794). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-7233 |
|
Open Redirect in django (CVE-2017-7233)
vulnerability in django (CVE-2017-7233). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-7234 |
|
Open Redirect in django (CVE-2017-7234)
vulnerability in django (CVE-2017-7234). Risk of unauthorized operations or information disclosure.
|