PyPI/django

Django Allows Arbitrary URL Generation

Modified: 9/18/2024

Django denial of service via file upload naming

Modified: 2/19/2025

Django Denial-of-service possibility in truncatechars_html and truncatewords_html template filters

Modified: 11/27/2024

SQL Injection in Django

Modified: 2/21/2025

Resource exhaustion in Django

Modified: 3/19/2025

XSS in Django

Modified: 9/20/2024

Django has Observable Timing Discrepancy

Modified: 9/10/2026

Improper Input Validation in Django

Modified: 11/19/2024

Django has Inefficient Algorithmic Complexity

Modified: 9/10/2026

Django open redirect and possible XSS attack via user-supplied numeric redirect URLs

Modified: 9/18/2024

Django DNS Rebinding Vulnerability

Modified: 11/28/2024

SQL injection in Django

Modified: 7/9/2026

Django: cache middleware may expose private responses when unrelated request cookies are present

Modified: 9/10/2026

Denial of service in django

Modified: 9/16/2024

Django Access Restrictions Bypass

Modified: 11/28/2024

Django cross-site scripting (XSS) vulnerability in the AdminURLFieldWidget widget

Modified: 2/19/2025

Django Denial of Service Vulnerability in the authentication framework

Modified: 9/18/2024

Django has Inefficient Algorithmic Complexity

Modified: 9/10/2026

Denial-of-service in Django

Modified: 9/20/2024

Django Cross-site scripting (XSS) vulnerability

Modified: 9/16/2024

Django Image Field Vulnerable to Image Decompression Bombs

Modified: 9/17/2024

Django vulnerable to Improper Restriction of Operations within the Bounds of a Memory Buffer

Modified: 9/16/2024

Django open redirect

Modified: 9/17/2024

Django vulnerable to denial-of-service attack via the urlize() and urlizetrunc() template filters

Modified: 10/30/2024

Django Uses Cache Containing Sensitive Information

Modified: 9/10/2026

Cross-site request forgery in Django

Modified: 6/28/2026

Django has potential DoS via MultiPartParser through crafted multipart uploads

Modified: 9/10/2026

Django Middleware Enables Session Hijacking

Modified: 2/19/2025

Django has an SQL Injection issue

Modified: 9/10/2026

Django Cross-site Scripting Vulnerability

Modified: 2/19/2025

Path Traversal in Django

Modified: 9/20/2024

Django Incorrect HTTP detection with reverse-proxy connecting via HTTPS

Modified: 9/18/2024

Infinite Loop in Django

Modified: 9/20/2024

Django database denial-of-service with ModelMultipleChoiceField

Modified: 9/18/2024

Django allows unprivileged users to read the password hashes of arbitrary accounts

Modified: 9/18/2024

SQL Injection in Django

Modified: 2/21/2025

Django is subject to SQL injection through its column aliases

Modified: 9/10/2026

Django settings leak in date template filter

Modified: 9/18/2024

Django allows user sessions hijacking via an empty string in the session key

Modified: 9/17/2024

Django Allows Redirect via Data URL

Modified: 11/26/2024

Django vulnerable to a denial-of-service attack

Modified: 11/4/2025

Django cross-site scripting (XSS) attack via user-supplied redirect URLs

Modified: 9/18/2024

Directory traversal in Django

Modified: 9/16/2024

Django Uses Persistent Cookies Containing Sensitive Information

Modified: 9/10/2026

Django Denial of service vulnerability in django.utils.encoding.uri_to_iri

Modified: 11/4/2025

Django WSGI Header Spoofing Vulnerability

Modified: 9/18/2024

Django Cross-site Scripting in AdminURLFieldWidget

Modified: 9/20/2024

Improper date handling in Django

Modified: 6/28/2026

Django Improper Output Neutralization for Logs vulnerability

Modified: 9/10/2026

Django denial-of-service in django.utils.html.strip_tags()

Modified: 9/10/2026

Django Reuses Cached CSRF Token

Modified: 4/13/2025

Information disclosure in Django

Modified: 2/21/2025

Django: UpdateCacheMiddleware may disclose cached responses due to case-sensitive Cache-Control handling

Modified: 9/10/2026

Django has a denial-of-service possibility in strip_tags()

Modified: 9/10/2026

Cross-site scripting in django

Modified: 6/28/2026

Django vulnerable to Uncontrolled Resource Consumption

Modified: 9/10/2026

Django: DomainNameValidator permits newline characters that may enable HTTP header injection

Modified: 9/10/2026

Django vulnerable to Reflected File Download attack

Modified: 2/4/2026

Django: has_vary_header may expose cached responses when Vary values contain whitespace

Modified: 9/10/2026

Django: SGI requests with a missing or understated `Content-Length` header could bypass the `DATA_UPLOAD_MAX_MEMORY_SIZE` limit

Modified: 9/10/2026

Cross-site Scripting in Django

Modified: 9/20/2024

Django cross-site scripting (XSS) vulnerability via is_safe_url function

Modified: 2/19/2025

Django Path Traversal vulnerability

Modified: 9/10/2026

Django vulnerable to XSS on 500 pages

Modified: 9/18/2024

Django vulnerable to Denial of Service via i18n middleware component

Modified: 11/18/2024

Django Admin Media Handler Vulnerable to Directory Traversal

Modified: 9/16/2024

Django Denial-of-service in django.utils.text.Truncator

Modified: 9/20/2024

Django Cross-site scripting Vulnerability

Modified: 9/17/2024

Django ReDoS in validators.URLValidator

Modified: 9/18/2024

Django: GDALRaster may over-read heap memory when constructed from bytes

Modified: 9/10/2026

Django CSRF Protection Bypass

Modified: 11/28/2024

Django vulnerable to Denial of Service

Modified: 9/10/2026

Django Incorrectly Validates URLs

Modified: 2/19/2025

Django User Enumeration Vulnerability

Modified: 9/18/2024

Django Incorrect Default Permissions

Modified: 11/19/2024

Django vulnerable to SQL injection via _connector keyword argument in QuerySet and Q objects.

Modified: 6/5/2026

Django Directory Traversal via archive.extract

Modified: 9/20/2024

Improper query string handling in Django

Modified: 6/28/2026

Cross-site scripting in django

Modified: 9/16/2024

Django is vulnerable to Denial of Service attack in formset

Modified: 2/19/2025

Django Cross-site Scripting Vulnerability

Modified: 2/19/2025

Django has an SQL Injection issue

Modified: 9/10/2026

Django open redirect

Modified: 9/18/2024

Django Denial-of-service by filling session store

Modified: 9/18/2024

Django Denial-of-service in strip_tags()

Modified: 9/20/2024

Django: signed cookies are vulnerable to salt namespace collisions

Modified: 9/10/2026

Django Denial-of-service in django.utils.text.Truncator

Modified: 11/4/2025

Django Cross-Site Request Forgery vulnerability

Modified: 9/16/2024

SQL injection in Django

Modified: 2/21/2025

Django vulnerable to SQL injection in column aliases

Modified: 9/10/2026

Django allows unintended model editing

Modified: 11/19/2024

Django Denial-of-service possibility with strip_tags

Modified: 9/18/2024

Django has regular expression denial of service vulnerability in EmailValidator/URLValidator

Modified: 11/4/2025

Django memory consumption vulnerability

Modified: 11/4/2025

Django DoS in django.views.static.serve

Modified: 2/19/2025

Directory-traversal in Django

Modified: 9/20/2024

Django Incorrect Default Permissions

Modified: 9/18/2024

Django SQL injection in HasKey(lhs, rhs) on Oracle

Modified: 9/10/2026

Django has a Race Condition vulnerability

Modified: 9/10/2026

Django fails to prevent reuse of a partially-initialized connection after a failed `STARTTLS` handshake

Modified: 9/10/2026