DJ
Vendor
djangoproject
167
CVEs
0
On KEV
4
New 30D
Products
DJ9.8
Django
djangoproject
161 CVEs0 on KEV4 new
DA7.5
daphne
djangoproject
2 CVEs0 on KEV0 new
AS7.5
asgiref
djangoproject
1 CVEs0 on KEV0 new
CH7.4
Channels
Djangoproject
1 CVEs0 on KEV0 new
PI–
Piston
Djangoproject
1 CVEs0 on KEV0 new
TA–
Tastypie
Djangoproject
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-87975 | DJ Django djangoproject | 4.3 | Oct 6 | Privilege abuse in model formsets with editable primary keys |
| CVE-2026-87890 | DJ Django djangoproject | 5.3 | Oct 6 | Potential request forgery via spatial lookup byte values |
| CVE-2026-84429 | DJ Django djangoproject | 5.3 | Oct 6 | Potential denial-of-service vulnerability in HTTP header parsing |
| CVE-2026-77050 | DJ Django djangoproject | 5.3 | Oct 6 | Potential denial-of-service vulnerability in get_supported_language_variant() |
| CVE-2026-15920 | DJ Django djangoproject | 6.1 | Aug 4 | Potential cross-site scripting via URLField values in the admin |
| CVE-2026-15830 | DJ Django djangoproject | 5.3 | Aug 4 | Potential denial-of-service vulnerability via nested geometry collections |
| CVE-2026-15337 | DJ Django djangoproject | 5.3 | Aug 4 | Potential denial-of-service vulnerability in check_for_language() |
| CVE-2026-15307 | DJ Django djangoproject | 8.8 | Aug 4 | Server-side file-write and request forgery via spatial lookups |
| CVE-2026-53878 | DJ Django djangoproject | 6.1 | Jul 7 | Header injection possibility since DomainNameValidator accepted newlines in input |
| CVE-2026-53877 | DJ Django djangoproject | 4.8 | Jul 7 | Heap buffer over-read in GDALRaster |
| CVE-2026-48588 | DJ Django djangoproject | 5.3 | Jul 7 | Potential exposure of private data via cached Set-Cookie response |
| CVE-2026-44546 | DA daphne djangoproject | 5.3 | Jun 3 | Header injection via WebSocket upgrade parser differential allows ASGI scope header spoofing |
| CVE-2026-44545 | DA daphne djangoproject | 7.5 | Jun 3 | Unbounded WebSocket message and frame sizes can cause unauthenticated remote denial of service |
| CVE-2026-48587 | DJ Django djangoproject | 5.3 | Jun 3 | Potential exposure of private data via whitespace padding in Vary header |
| CVE-2026-35193 | DJ Django djangoproject | 3.1 | Jun 3 | Potential exposure of private data via missing Vary: Authorization in UpdateCacheMiddleware |
| CVE-2026-8404 | DJ Django djangoproject | 5.3 | Jun 3 | Potential exposure of private data via case-sensitive Cache-Control directives in UpdateCacheMiddleware |
| CVE-2026-7666 | DJ Django djangoproject | 3.1 | Jun 3 | Potential unencrypted email transmission via STARTTLS in the SMTP backend |
| CVE-2026-6873 | DJ Django djangoproject | 4.3 | Jun 3 | Signed cookie salt namespace collision in django.http.HttpRequest.get_signed_cookie |
| CVE-2026-35192 | DJ Django djangoproject | 6.5 | May 5 | Session fixation via public cached pages and SESSION_SAVE_EVERY_REQUEST |
| CVE-2026-6907 | DJ Django djangoproject | 5.3 | May 5 | Potential exposure of private data due to incorrect handling of Vary: * in UpdateCacheMiddleware |
| CVE-2026-5766 | DJ Django djangoproject | 5.3 | May 5 | Potential denial-of-service vulnerability in ASGI requests via file upload limit bypass |
| CVE-2026-33034 | DJ Django djangoproject | 7.5 | Apr 7 | Potential denial-of-service vulnerability in ASGI requests via memory upload limit bypass |
| CVE-2026-33033 | DJ Django djangoproject | 6.5 | Apr 7 | Potential denial-of-service vulnerability in MultiPartParser via base64-encoded file upload |
| CVE-2026-4292 | DJ Django djangoproject | 2.7 | Apr 7 | Privilege abuse in ModelAdmin.list_editable |
| CVE-2026-4277 | DJ Django djangoproject | 9.8 | Apr 7 | Privilege abuse in GenericInlineModelAdmin |
| CVE-2026-3902 | DJ Django djangoproject | 7.5 | Apr 7 | ASGI header spoofing via underscore/hyphen conflation |
| CVE-2026-25674 | DJ Django djangoproject | 3.7 | Mar 3 | Potential incorrect permissions on newly created file system objects |
| CVE-2026-25673 | DJ Django djangoproject | 7.5 | Mar 3 | Potential denial-of-service vulnerability in URLField via Unicode normalization on Windows |
| CVE-2025-14550 | AS asgiref djangoproject | 7.5 | Feb 3 | Potential denial-of-service vulnerability via repeated headers when using ASGI |
| CVE-2026-1312 | DJ Django djangoproject | 5.4 | Feb 3 | Potential SQL injection via QuerySet.order_by and FilteredRelation |
| CVE-2026-1287 | DJ Django djangoproject | 5.4 | Feb 3 | Potential SQL injection in column aliases via control characters |
| CVE-2026-1285 | DJ Django djangoproject | 7.5 | Feb 3 | Potential denial-of-service vulnerability in django.utils.text.Truncator HTML methods |
| CVE-2026-1207 | DJ Django djangoproject | 5.4 | Feb 3 | Potential SQL injection via raster lookups on PostGIS |
| CVE-2025-13473 | DJ Django djangoproject | 5.3 | Feb 3 | Username enumeration through timing difference in mod_wsgi authentication handler |
| CVE-2025-64460 | DJ Django djangoproject | 7.5 | Dec 2 | Potential denial-of-service vulnerability in XML serializer text extraction |
| CVE-2025-13372 | DJ Django djangoproject | 4.3 | Dec 2 | Potential SQL injection in FilteredRelation column aliases on PostgreSQL |
| CVE-2025-64459 | DJ Django Djangoproject | 9.1 | Nov 5 | An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8 |
| CVE-2025-64458 | DJ Django Djangoproject | 7.5 | Nov 5 | An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8 |
| CVE-2025-59682 | DJ Django Djangoproject | 6.5 | Oct 1 | An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7 |
| CVE-2025-59681 | DJ Django Djangoproject | 9.8 | Oct 1 | An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7 |
| CVE-2025-57833 | DJ Django Djangoproject | 8.1 | Sep 3 | An issue was discovered in Django 4.2 before 4.2.24, 5.1 before 5.1.12, and 5.2 before 5.2.6 |
| CVE-2025-48432 | DJ Django Djangoproject | 5.3 | Jun 5 | An issue was discovered in Django 5.2 before 5.2.3, 5.1 before 5.1.11, and 4.2 before 4.2.23 |
| CVE-2025-32873 | DJ Django Djangoproject | 5.3 | May 8 | An issue was discovered in Django 4.2 before 4.2.21, 5.1 before 5.1.9, and 5.2 before 5.2.1 |
| CVE-2025-27556 | DJ Django Djangoproject | 7.5 | Apr 2 | An issue was discovered in Django 5.1 before 5.1.8 and 5.0 before 5.0.14 |
| CVE-2025-26699 | DJ Django Djangoproject | 7.5 | Mar 6 | An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20 |
| CVE-2024-56374 | DJ Django Djangoproject | 7.5 | Jan 14 | An issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18 |
| CVE-2024-53908 | DJ Django Djangoproject | 9.8 | Dec 6 | An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17 |
| CVE-2024-53907 | DJ Django Djangoproject | 7.5 | Dec 6 | An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17 |
| CVE-2024-45231 | DJ Django Djangoproject | 5.3 | Oct 8 | An issue was discovered in Django v5.1.1, v5.0.9, and v4.2.16 |
| CVE-2024-45230 | DJ Django Djangoproject | 7.5 | Oct 8 | An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16 |
| CVE-2024-42005 | DJ Django Djangoproject | 7.3 | Aug 7 | An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15 |
| CVE-2024-41991 | DJ Django Djangoproject | 7.5 | Aug 7 | An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15 |
| CVE-2024-41990 | DJ Django Djangoproject | 7.5 | Aug 7 | An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15 |
| CVE-2024-41989 | DJ Django Djangoproject | 7.5 | Aug 7 | An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15 |
| CVE-2024-39614 | DJ Django Djangoproject | 7.5 | Jul 10 | An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14 |
| CVE-2024-39330 | DJ Django Djangoproject | 4.3 | Jul 10 | An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14 |
| CVE-2024-39329 | DJ Django Djangoproject | 5.3 | Jul 10 | An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14 |
| CVE-2024-38875 | DJ Django Djangoproject | 7.5 | Jul 10 | An issue was discovered in Django 4.2 before 4.2.14 and 5.0 before 5.0.7 |
| CVE-2024-27351 | DJ Django Djangoproject | 5.3 | Mar 15 | In Django 3.2 before 3.2.25, 4.2 before 4.2.11, and 5.0 before 5.0.3, the django.utils.text.Truncator.words() method (with html=True) and the truncatewords_html template filter… |
| CVE-2024-24680 | DJ Django Djangoproject | 7.5 | Feb 6 | An issue was discovered in Django 3.2 before 3.2.24, 4.2 before 4.2.10, and Django 5.0 before 5.0.2 |