Session fixation via public cached pages and SESSION_SAVE_EVERY_REQUEST

Potential denial-of-service vulnerability in MultiPartParser via base64-encoded file upload

An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7

Django 2.1 before 2.1.15 and 2.2 before 2.2.8 allows unintended model editing

In Django 1.11.x before 1.11.18, 2.0.x before 2.0.10, and 2.1.x before 2.1.5, an Improper Neutralization of Special Elements in Output Used by a Downstream Component issue exists…

Potential cross-site scripting via URLField values in the admin

Header injection possibility since DomainNameValidator accepted newlines in input

The {% debug %} template tag in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2 does not properly encode the current context

In Django 2.2 before 2.2.22, 3.1 before 3.1.10, and 3.2 before 3.2.2 (with Python 3.9.5+), URLValidator does not prohibit newlines and tabs (unless the URLField form field is…

An issue was discovered in Django 2.2 before 2.2.13 and 3.0 before 3.0.7

An issue was discovered in Django 1.11 before 1.11.21, 2.1 before 2.1.9, and 2.2 before 2.2.2

django.middleware.common.CommonMiddleware in Django 1.11.x before 1.11.15 and 2.0.x before 2.0.8 has an Open Redirect

In Django 1.10.x before 1.10.8 and 1.11.x before 1.11.5, HTML autoescaping was disabled in a portion of the template for the technical 500 debug page

A maliciously crafted URL to a Django (1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18) site using the ``django.views.static.serve()`` view could redirect to any…

Django 1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18 relies on user input in some cases to redirect the user to an "on success" URL

Cross-site scripting (XSS) vulnerability in the dismissChangeRelatedObjectPopup function in contrib/admin/static/admin/js/admin/RelatedObjectLookups.js in Django before 1.8.14,…

Web Cache Poisoning

An issue was discovered in Django 2.2 before 2.2.13 and 3.0 before 3.0.7

Django 1.9.x before 1.9.2, when ModelAdmin.save_as is set to True, allows remote authenticated users to bypass intended access restrictions and create ModelAdmin objects via the…

Potential SQL injection via QuerySet.order_by and FilteredRelation

Potential SQL injection in column aliases via control characters

Potential SQL injection via raster lookups on PostGIS

Potential request forgery via spatial lookup byte values

Potential denial-of-service vulnerability in HTTP header parsing

Potential denial-of-service vulnerability in get_supported_language_variant()

Potential denial-of-service vulnerability via nested geometry collections

Potential denial-of-service vulnerability in check_for_language()

Potential exposure of private data via cached Set-Cookie response

Potential exposure of private data via whitespace padding in Vary header

Potential exposure of private data via case-sensitive Cache-Control directives in UpdateCacheMiddleware

Potential exposure of private data due to incorrect handling of Vary: * in UpdateCacheMiddleware

Potential denial-of-service vulnerability in ASGI requests via file upload limit bypass

Username enumeration through timing difference in mod_wsgi authentication handler

An issue was discovered in Django 5.2 before 5.2.3, 5.1 before 5.1.11, and 4.2 before 4.2.23

An issue was discovered in Django 4.2 before 4.2.21, 5.1 before 5.1.9, and 5.2 before 5.2.1

An issue was discovered in Django v5.1.1, v5.0.9, and v4.2.16

An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14

In Django 3.2 before 3.2.25, 4.2 before 4.2.11, and 5.0 before 5.0.3, the django.utils.text.Truncator.words() method (with html=True) and the truncatewords_html template filter…

Storage.save in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1 allows directory traversal if crafted filenames are directly passed to it

In Django 2.2 before 2.2.20, 3.0 before 3.0.14, and 3.1 before 3.1.8, MultiPartParser allowed directory traversal via uploaded files with suitably crafted file names

In Django 2.2 before 2.2.18, 3.0 before 3.0.12, and 3.1 before 3.1.6, the django.utils.archive.extract method (used by "startapp --template" and "startproject --template") allows…

An issue was discovered in Django 1.11 before 1.11.22, 2.1 before 2.1.10, and 2.2 before 2.2.3

An issue was discovered in Django 2.0 before 2.0.3, 1.11 before 1.11.11, and 1.8 before 1.8.19

An issue was discovered in Django 2.0 before 2.0.3, 1.11 before 1.11.11, and 1.8 before 1.8.19

Django before 2.2.24, 3.x before 3.1.12, and 3.2.x before 3.2.4 has a potential directory traversal via django.contrib.admindocs

An issue was discovered in Django 2.1 before 2.1.2, in which unprivileged users can read the password hashes of arbitrary accounts

Heap buffer over-read in GDALRaster

Privilege abuse in model formsets with editable primary keys

Signed cookie salt namespace collision in django.http.HttpRequest.get_signed_cookie

An issue was discovered in 5.2 before 5.2.9, 5.1 before 5.1.15, and 4.2 before 4.2.27