| Django Vulnerable to Allocation of Resources Without Limits or ThrottlingCVE-2025-26699 · GHSA-P3FP-8748-VQFQVersion ranges need review. |
djangoRed Hat Ansible Automation Platform 2/ansible-automation-platform-25/ee-dellemc-openmanage-rhel8 |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Django GeoDjango vulnerable to denial of service through deeply nested geometry collectionsCVE-2026-15830 · GHSA-Q238-5CXM-5C9HVersion ranges need review. |
djangoRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Django GeoDjango spatial lookups allow file writes and outbound requests through GDAL raster parsingCVE-2026-15307 · GHSA-WVQV-FJ8W-QMHMVersion ranges need review. |
djangoRed Hat Ansible Automation Platform 2/ansible-automation-platform-25/ansible-dev-tools-rhel8 |
PyPIRed Hat |
High
|
Fix reported |
|
| XSS in jQuery as used in Drupal, Backdrop CMS, and other productsCVE-2019-11358 · DRUPAL-CORE-2019-006Version ranges need review. |
drupal/coremaximebf/debugbar |
ComposerMavennpmNuGetPyPIRed HatRubyGems |
Medium
|
Fix reported |
|
| Django: GDALRaster may over-read heap memory when constructed from bytesCVE-2026-53877 · GHSA-CRHF-3PFG-W68WVersion ranges need review. |
djangoRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/lightspeed-rhel8 |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Django: cache middleware may expose private responses when unrelated request cookies are presentCVE-2026-48588 · GHSA-3H9F-R86X-QVJXVersion ranges need review. |
djangoRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/lightspeed-rhel8 |
PyPIRed Hat |
Low
|
Fix reported |
|
| Django: DomainNameValidator permits newline characters that may enable HTTP header injectionCVE-2026-53878 · GHSA-8QCX-XF44-272XVersion ranges need review. |
djangoRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/lightspeed-rhel8 |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Django: has_vary_header may expose cached responses when Vary values contain whitespaceCVE-2026-48587 · GHSA-923M-GV2P-W5QPVersion ranges need review. |
djangoRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/lightspeed-rhel8 |
PyPIRed Hat |
Low
|
Fix reported |
|
| Django: UpdateCacheMiddleware may disclose private cached responses by omitting Authorization from VaryCVE-2026-35193 · GHSA-QPC8-7FXC-CM4PVersion ranges need review. |
djangoRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/lightspeed-rhel8 |
PyPIRed Hat |
Low
|
Fix reported |
|
| Django: signed cookies are vulnerable to salt namespace collisionsCVE-2026-6873 · GHSA-H7PC-VWP9-298GVersion ranges need review. |
djangoRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/lightspeed-rhel8 |
PyPIRed Hat |
Low
|
Fix reported |
|
| Django: UpdateCacheMiddleware may disclose cached responses due to case-sensitive Cache-Control handlingCVE-2026-8404 · GHSA-8CJM-8MP7-R2XFVersion ranges need review. |
djangoRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/lightspeed-rhel8 |
PyPIRed Hat |
Low
|
Fix reported |
|
| Django fails to prevent reuse of a partially-initialized connection after a failed `STARTTLS` handshakeCVE-2026-7666 · GHSA-MM6V-Q8Q9-PGCFVersion ranges need review. |
djangoRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/lightspeed-rhel8 |
PyPIRed Hat |
Low
|
Fix reported |
|
| Django vulnerable to Uncontrolled Resource ConsumptionCVE-2026-25673 · GHSA-8P8V-WH79-9R56Version ranges need review. |
django |
PyPI |
High
|
Fix reported |
|
| Django has a Race Condition vulnerabilityCVE-2026-25674 · GHSA-MJGH-79QC-68W3Version ranges need review. |
djangoRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/lightspeed-rhel8 |
PyPIRed Hat |
Low
|
Fix reported |
|
| SQL injection in DjangoCVE-2020-9402 · GHSA-3GH2-XW74-JMCWVersion ranges need review. |
djangoRed Hat Ceph Storage 2/python-django |
PyPIRed Hat |
High
|
Fix reported |
|
| Django allows enumeration of user e-mail addressesCVE-2024-45231 · GHSA-RRQC-C2JX-6JGVVersion ranges need review. |
djangoRed Hat Ansible Automation Platform 1.2/ansible-tower |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Django vulnerable to partial directory traversal via archivesCVE-2025-59682 · GHSA-Q95W-C7QG-HRFFVersion ranges need review. |
djangoOpenShift Service Mesh 3/openshift-service-mesh/istio-proxyv2-rhel9 |
PyPIRed Hat |
Low
|
Fix reported |
|
| XML External Entity (XXE) in DjangoCVE-2013-1665 · GHSA-X64M-686F-FMM3Version ranges need review. |
djangoRed Hat Enterprise Linux 5/python |
PyPIRed Hat |
Medium
|
Fix reported |
|
| XML Entity Expansion (XEE) in DjangoCVE-2013-1664 · GHSA-QRH7-X6FP-C2MPVersion ranges need review. |
djangoRed Hat Enterprise Linux 5/python |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Django Arbitrary Code ExecutionCVE-2007-0404 · GHSA-QC99-G3WM-HGXRVersion ranges need review. |
django |
PyPI |
High
|
Fix reported |
|
