Security
فارسی
All products

Red Hat OpenStack Platform 18.0/python-django

Red Hat · Package
17 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Django GeoDjango vulnerable to denial of service through deeply nested geometry collectionsCVE-2026-15830 · GHSA-Q238-5CXM-5C9HVersion ranges need review. djangoRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 PyPIRed Hat Medium Fix reported
Django GeoDjango spatial lookups allow file writes and outbound requests through GDAL raster parsingCVE-2026-15307 · GHSA-WVQV-FJ8W-QMHMVersion ranges need review. djangoRed Hat Ansible Automation Platform 2/ansible-automation-platform-25/ansible-dev-tools-rhel8 PyPIRed Hat High Fix reported
Django has an Improper Handling of Length Parameter InconsistencyCVE-2026-5766 · GHSA-W26R-RMM8-9C29Version ranges need review. djangoRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/lightspeed-rhel8 PyPIRed Hat Medium Fix reported
Django Uses Cache Containing Sensitive InformationCVE-2026-6907 · GHSA-5HRC-GVXJ-W55PVersion ranges need review. djangoRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/lightspeed-rhel8 PyPIRed Hat Low Fix reported
Django Uses Persistent Cookies Containing Sensitive Information CVE-2026-35192 · GHSA-7H2M-M8VJ-598HVersion ranges need review. djangoRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/lightspeed-rhel8 PyPIRed Hat Low Fix reported
Django has a denial-of-service possibility in strip_tags()CVE-2025-32873 · GHSA-8J24-CJRQ-GR2MVersion ranges need review. djangoRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/ee-dellemc-openmanage-rhel8 PyPIRed Hat Medium Fix reported
Django denial-of-service attack in the intcomma template filterCVE-2024-24680 · GHSA-XXJ9-F6RV-M3X4Version ranges need review. djangoRed Hat Ansible Automation Platform 1.2/ansible-tower PyPIRed Hat High Fix reported
Regular expression denial-of-service in DjangoCVE-2024-27351 · GHSA-VM8Q-M57G-PFF3Version ranges need review. djangoRed Hat Certification Program for Red Hat Enterprise Linux 9/redhat-certification PyPIRed Hat Medium Fix reported
Django Denial-of-service in django.utils.text.TruncatorCVE-2023-43665 · GHSA-H8GC-PGJ2-VJM3Version ranges need review. djangoRed Hat Certification for Red Hat Enterprise Linux 7/python-django PyPIRed Hat High Fix reported
Django has regular expression denial of service vulnerability in EmailValidator/URLValidatorCVE-2023-36053 · GHSA-JH3W-4VVF-MJGRVersion ranges need review. djangoRed Hat Ansible Automation Platform 2/python3-django PyPIRed Hat High Fix reported
Django Denial of service vulnerability in django.utils.encoding.uri_to_iriCVE-2023-41164 · GHSA-7H4P-27MH-HMRWVersion ranges need review. djangoRed Hat Certification for Red Hat Enterprise Linux 7/python-django PyPIRed Hat Medium Fix reported
django: Django: Denial-of-service vulnerability due to excessive memory consumptionCVE-2026-15337 Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/eda-controller-rhel8 Red Hat Medium No fix reported
django: Django: Cross-site scripting via unvalidated URLField values in the adminCVE-2026-15920 Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/eda-controller-rhel8 Red Hat Medium No fix reported
django: Privilege abuse in model formsets with editable primary keysCVE-2026-87975 Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/eda-controller-rhel8 Red Hat Medium No fix reported
django: Server-side request forgery via unvalidated bytes in spatial lookupsCVE-2026-87890 Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/eda-controller-rhel8 Red Hat Medium No fix reported
django: Denial of service via quadratic parsing complexity in parse_header_parameters()CVE-2026-84429 Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/eda-controller-rhel8 Red Hat Medium No fix reported
django: Denial of service via unbounded caching of long language codes in get_supported_language_variant()CVE-2026-77050 Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/eda-controller-rhel8 Red Hat Medium No fix reported