Browse Security Advisories
Security Advisories for Django for https://github.com/django/django in pypi Clear Filters
Moderate
8 months ago
Django has a potential denial-of-service vulnerability in IPv6 validation
pypi
Django
Moderate
11 months ago
Django vulnerable to denial-of-service attack via the urlize() and urlizetrunc() template filters
pypi
Django
High
over 1 year ago
Django denial-of-service attack in the intcomma template filter
pypi
Django, django
Moderate
almost 2 years ago
Django Denial of service vulnerability in django.utils.encoding.uri_to_iri
pypi
django
High
almost 2 years ago
Django potential denial of service vulnerability in UsernameField on Windows
pypi
Django
High
about 2 years ago
Django has regular expression denial of service vulnerability in EmailValidator/URLValidator
pypi
Django
Critical
over 2 years ago
Django bypasses validation when using one form field to upload multiple files
pypi
Django
High
over 2 years ago
Django contains Uncontrolled Resource Consumption via cached header
pypi
django
High
almost 3 years ago
Django denial-of-service vulnerability in internationalized URLs
pypi
django
Critical
about 3 years ago
Django `Trunc()` and `Extract()` database functions vulnerable to SQL Injection
pypi
Django
High
over 3 years ago
Django Image Field Vulnerable to Image Decompression Bombs
pypi
Django, django
High
over 3 years ago
Django vulnerable to Improper Restriction of Operations within the Bounds of a Memory Buffer
pypi
Django
High
over 3 years ago
Django Denial of Service Vulnerability in the authentication framework
pypi
Django
Moderate
over 3 years ago
Django allows user sessions hijacking via an empty string in the session key
pypi
Django
Moderate
over 3 years ago
Denial-of-service possibility in logout() view by filling session store
pypi
Django
Moderate
over 3 years ago
Django cross-site scripting (XSS) vulnerability in the AdminURLFieldWidget widget
pypi
django
Critical
over 3 years ago
Django user with hardcoded password created when running tests on Oracle
pypi
Django
Moderate
over 3 years ago
Django cross-site scripting (XSS) vulnerability via is_safe_url function
pypi
Django
Moderate
over 3 years ago
Django cross-site scripting (XSS) attack via user-supplied redirect URLs
pypi
Django
Moderate
almost 4 years ago
Potential bypass of an upstream access control based on URL paths in Django
pypi
Django
High
over 4 years ago
Django Access Control Bypass possibly leading to SSRF, RFI, and LFI attacks
pypi
Django
Critical
over 5 years ago
Django Potential account hijack via password reset form
pypi
Django, django
Filter by Severity
Filter by Ecosystem
maven
6,869
packagist
5,422
pypi
4,942
npm
4,297
go
2,920
nuget
1,880
cargo
1,086
rubygems
927
actions
37
hex
37
swift
36
pub
10
Filter by Package
tensorflow
433
tensorflow-gpu
427
tensorflow-cpu
423
Django
108
apache-airflow
85
Plone
72
salt
65
ansible
63
apache-superset
61
mlflow
53
nova
48
django
46
gradio
44
vyper
44
matrix-synapse
42
rdiffweb
42
plone
41
picklescan
39
moin
35
keystone
32
opencv-python
31
opencv-contrib-python
31
Pillow
29
pillow
28
open-webui
25
vllm
25
pyload-ng
23
glance
21
langchain
20
aim
20
ethyca-fides
20
neutron
19
mercurial
18
mindsdb
18
cobbler
18
notebook
17
cryptography
17
calibreweb
17
OctoPrint
17
paddlepaddle
16
transformers
16
PaddlePaddle
16
lollms
16
aiohttp
15
urllib3
14
mobsf
14
pyftpdlib
14
modoboa
14
vantage6
14
litellm
14
zenml
13
h2o
13
roundup
13
twisted
12
sentry
12
wagtail
12
pgadmin4
12
swift
12
nautobot
12
waitress
11
onionshare-cli
11
label-studio
11
horizon
11
trytond
11
opencv-contrib-python-headless
10
pyspark
10
opencv-python-headless
10
Flask-AppBuilder
10
zope
9
kiwitcms
9
ryu
9
ckan
9
agentscope
9
python-keystoneclient
9
ai.h2o:h2o-core
9
cinder
9
lief
9
changedetection.io
8
llama-index
8
Zope2
8
aubio
8
bentoml
8
indico
8
dbgpt
8
tornado
8
numpy
8
trac
8
ipython
8
Zope
8
copyparty
8
pysaml2
7
web2py
7
jupyter-server
7
pip
7
inventree
7
matrix-sydent
7
scrapy
7
llama-index-core
7
executorch
7
requests
7
Products.CMFPlone
7
snowflake-connector-python
6
langflow
6
graphite-web
6
Moin
6
tuf
6
yt-dlp
6
ansible-core
6
torch
6
OpenEXR
6
torchserve
6
omero-web
6
mailman
6
lxml
6
whoogle-search
6
dtale
6
codechecker
6
mage-ai
6
apache-iotdb
6
Jinja2
6
apache-airflow-providers-apache-hive
6
Mezzanine
6
langchain-community
6
grpc
5
bleach
5
werkzeug
5
feedparser
5
Werkzeug
5
fschat
5
lmdb
5
pretix
5
python-gnupg
5
esphome
5
jupyterhub
5
nltk
5
keylime
5
paramiko
5
ait-core
5
onnx
5
oauthenticator
5
langchain-experimental
5
composio-core
5
mayan-edms
5
Weblate
5
saleor
5
mitmproxy
5
grpcio
5
RestrictedPython
4
markdown2
4
koji
4
pandasai
4
nvflare
4
qutebrowser
4
starlette
4
bottle
4
ray
4
Scrapy
4
jupyterlab
4
pywasm3
4
reportlab
4
Nova
4
org.apache.streampipes:streampipes-parent
4
wasmtime
4
flask-cors
4
pytorch-lightning
4
jwcrypto
4
streamlit
4
GitPython
4
barbican
4
setuptools
4
frappe
4
httpie
4
jinja2
4
homeassistant
4
Flask-Security-Too
4
tripleo-heat-templates
4
dbt-core
4
MaterialX
4
django-helpdesk
4
apache-submarine
4
streampipes
4
aws-iot-device-sdk-v2
4
Pygments
4
keras
4
InvokeAI
4
awsiotsdk
4
Keystone
4
flask-appbuilder
4
software.amazon.awssdk.iotdevicesdk:aws-iot-device-sdk
4
PyPDF2
4
FreeTAKServer-UI
4
buildbot
4
flask
4
indy-node
4
xml2rfc
4
Radicale
4
skops
4
weblate
4
backend.ai
3
plone.app.theming
3