| Django Vulnerable to Allocation of Resources Without Limits or ThrottlingCVE-2025-26699 · GHSA-P3FP-8748-VQFQVersion ranges need review. |
djangoRed Hat Ansible Automation Platform 2/ansible-automation-platform-25/ee-dellemc-openmanage-rhel8 |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Django GeoDjango vulnerable to denial of service through deeply nested geometry collectionsCVE-2026-15830 · GHSA-Q238-5CXM-5C9HVersion ranges need review. |
djangoRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Django allows enumeration of user e-mail addressesCVE-2024-45231 · GHSA-RRQC-C2JX-6JGVVersion ranges need review. |
djangoRed Hat Ansible Automation Platform 1.2/ansible-tower |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Django has an Improper Handling of Length Parameter InconsistencyCVE-2026-5766 · GHSA-W26R-RMM8-9C29Version ranges need review. |
djangoRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/lightspeed-rhel8 |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Django Uses Cache Containing Sensitive InformationCVE-2026-6907 · GHSA-5HRC-GVXJ-W55PVersion ranges need review. |
djangoRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/lightspeed-rhel8 |
PyPIRed Hat |
Low
|
Fix reported |
|
| Django Uses Persistent Cookies Containing Sensitive Information CVE-2026-35192 · GHSA-7H2M-M8VJ-598HVersion ranges need review. |
djangoRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/lightspeed-rhel8 |
PyPIRed Hat |
Low
|
Fix reported |
|
| Django has a denial-of-service possibility in strip_tags()CVE-2025-32873 · GHSA-8J24-CJRQ-GR2MVersion ranges need review. |
djangoRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/ee-dellemc-openmanage-rhel8 |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Django Improper Output Neutralization for Logs vulnerabilityCVE-2025-48432 · GHSA-7XR5-9HCQ-CHF9Version ranges need review. |
djangoRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/lightspeed-rhel8 |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Django memory consumption vulnerabilityCVE-2024-41989 · GHSA-JH75-99HH-QVX9Version ranges need review. |
djangoRed Hat Ansible Automation Platform 2/ansible-automation-platform-25/lightspeed-rhel8 |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Django vulnerable to a denial-of-service attackCVE-2024-41990 · GHSA-795C-9XPC-XW6GVersion ranges need review. |
djangoRed Hat Discovery 1/discovery-server-container |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Data leakage via cache key collision in DjangoCVE-2020-13254 · GHSA-WPJR-J57X-WXFWVersion ranges need review. |
djangoRed Hat Ceph Storage 2/python-django |
PyPIRed Hat |
High
|
Fix reported |
|
| Django Access Control Bypass possibly leading to SSRF, RFI, and LFI attacks CVE-2021-33571 · GHSA-P99V-5W3C-JQQ9Version ranges need review. |
djangoRed Hat Ansible Automation Platform 1.2/django |
PyPIRed Hat |
High
|
Fix reported |
|
| XSS in DjangoCVE-2020-13596 · GHSA-2M34-JCJV-45XFVersion ranges need review. |
djangoRed Hat Ceph Storage 2/python-django |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Django Directory Traversal via archive.extractCVE-2021-3281 · GHSA-FVGF-6H6H-3322Version ranges need review. |
djangoRed Hat Ansible Automation Platform 1.2/python-django |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Path Traversal in DjangoCVE-2021-33203 · GHSA-68W8-QJQ3-2GFMVersion ranges need review. |
djangoRed Hat Ansible Automation Platform 1.2/django |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Path Traversal in DjangoCVE-2021-31542 · GHSA-RXJP-MFM9-W4WRVersion ranges need review. |
djangoRed Hat Ansible Automation Platform 1.2/django |
PyPIRed Hat |
High
|
Fix reported |
|
| Django Potential account hijack via password reset formCVE-2019-19844 · GHSA-VFQ6-HQ5R-27R6Version ranges need review. |
djangoRed Hat Ceph Storage 2/calamari-server |
PyPIRed Hat |
Critical
|
Fix reported |
|
| SQL injection in DjangoCVE-2020-7471 · GHSA-HMR4-M2H5-33QXVersion ranges need review. |
djangoRed Hat Ceph Storage 2/python-django |
PyPIRed Hat |
Critical
|
Fix reported |
|
| django: Django: Denial-of-service vulnerability due to excessive memory consumptionCVE-2026-15337 |
Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/eda-controller-rhel8 |
Red Hat |
Medium
|
No fix reported |
|
| django: Django: Cross-site scripting via unvalidated URLField values in the adminCVE-2026-15920 |
Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/eda-controller-rhel8 |
Red Hat |
Medium
|
No fix reported |
|
