Login Request a demo
DJ
Product
Django
by djangoproject · last CVE Oct 6, 2026
161
CVEs
0
On KEV
9.8
Max CVSS
4
New 30D
Vulnerabilities161In the news0Timeline
Severity mix
Critical 13High 46Medium 51Low 5
Severity
All severities161Critical13High46Medium51Low5
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Django to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-25674
3.7
0%
Mar 3
Potential incorrect permissions on newly created file system objects
Affected: 6.0 before 6.0.3; 5.2 before 5.2.12; 4.2 before 4.2.29
CVE-2026-35193
3.1
0%
Jun 3
Potential exposure of private data via missing Vary: Authorization in UpdateCacheMiddleware
Affected: 6.0 before 6.0.6; 5.2 before 5.2.15
CVE-2026-7666
3.1
0%
Jun 3
Potential unencrypted email transmission via STARTTLS in the SMTP backend
Affected: 6.0 before 6.0.6; 5.2 before 5.2.15
CVE-2016-2513
3.1
3%
Apr 8
The password hasher in contrib/auth/hashers.py in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to enumerate users via a timing attack involving login…
Affected: 1.8.9; 1.9; 1.9.1; 1.9.2
CVE-2026-4292
2.7
0%
Apr 7
Privilege abuse in ModelAdmin.list_editable
Affected: 6.0 before 6.0.4; 5.2 before 5.2.13; 4.2 before 4.2.30
Showing 5