Ecosyste.ms: Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

pypi django Security Advisories

Low

GSA_kwCzR0hTQS12bThxLW01N2ctcGZmM84AA6CU

Regular expression denial-of-service in Django
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 1 month ago

Moderate

GSA_kwCzR0hTQS14eGo5LWY2cnYtbTN4NM4AA5IP

Django denial-of-service attack in the intcomma template filter
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 29.9
Published: 3 months ago

Moderate

GSA_kwCzR0hTQS1oOGdjLXBnajItdmptM84AA25m

Django Denial-of-service in django.utils.text.Truncator
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 29.9
Published: 6 months ago

Moderate

GSA_kwCzR0hTQS03aDRwLTI3bWgtaG1yd84AA25h

Django Denial of service vulnerability in django.utils.encoding.uri_to_iri
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 26.8
Published: 6 months ago

High

GSA_kwCzR0hTQS1xMmpmLWg5am0tbTdwNM4AAxVW

Django contains Uncontrolled Resource Consumption via cached header
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 38.0
Published: about 1 year ago

High

GSA_kwCzR0hTQS1xcnc1LTVoMjgtNmNtZ84AAvXa

Django denial-of-service vulnerability in internationalized URLs
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 38.0
Published: over 1 year ago

Critical

GSA_kwCzR0hTQS1wNjR4LThyeHgtd2Y2cc4AAtF-

Django `Trunc()` and `Extract()` database functions vulnerable to SQL Injection
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 49.6
Published: almost 2 years ago

Moderate

GSA_kwCzR0hTQS01OXc4LTR3bTItNHh3OM4AAfPe

Django Image Field Vulnerable to Image Decompression Bombs
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 2 years ago

Moderate

GSA_kwCzR0hTQS03OHZ4LWdnY2gtd2dobc4AAfPg

Django Allows Redirect via Data URL
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 2 years ago

Moderate

GSA_kwCzR0hTQS0yNjU1LXE0NTMtMjJmOc4AAfNa

Django Allows Arbitrary URL Generation
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 2 years ago

High

GSA_kwCzR0hTQS12ampwLTlyODMtMjJyY84AAe3i

Django Directory Traversal via ssi template tag
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 43.5
Published: almost 2 years ago

Moderate

GSA_kwCzR0hTQS00YzQyLTRyeG0teDZxZs4AAeye

Django Denial of Service Vulnerability in the authentication framework
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 2 years ago

Moderate

GSA_kwCzR0hTQS00Nng0LTlqbXYtamM4cM4AAdCD

Django Access Restrictions Bypass
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 27.8
Published: almost 2 years ago

Moderate

GSA_kwCzR0hTQS02NTY1LWZnODYtNmpjeM4AAc0O

Django Cross-site Scripting Vulnerability
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 2 years ago

Moderate

GSA_kwCzR0hTQS02d2NyLXdjcW0tM21maM4AAcl8

Django settings leak in date template filter
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 2 years ago

Moderate

GSA_kwCzR0hTQS03cWZ3LWo3aHAtdjQ1Z84AAcfU

Django WSGI Header Spoofing Vulnerability
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 2 years ago

Moderate

GSA_kwCzR0hTQS1qaGpnLXcyY3AtNWo0NM4AAce9

Django DoS in django.views.static.serve
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 2 years ago

Moderate

GSA_kwCzR0hTQS1ndjk4LWc2MjgtbTl4Nc4AAce6

Django Cross-site Scripting Vulnerability
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 2 years ago

Moderate

GSA_kwCzR0hTQS04OWhqLXhmeDUtN3E2Ns4AAcJo

Django Reuses Cached CSRF Token
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 2 years ago

High

GSA_kwCzR0hTQS13cWpqLWh4ODQtdjQ0Oc4AAcJQ

Django Vulnerable to MySQL Injection
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 2 years ago

Moderate

GSA_kwCzR0hTQS1xN3EyLXFmMnEtcnczd84AAcJT

Django Vulnerable to Cache Poisoning
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 2 years ago

Moderate

GSA_kwCzR0hTQS00ODk0LTV2cWMtNnIycs4AAZ0v

Django Cross-site scripting (XSS) vulnerability in the AdminURLFieldWidget widget
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 2 years ago

Low

GSA_kwCzR0hTQS1mcDZwLTV4dnctbTc0Zs4AAZQc

Django User Enumeration Vulnerability
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 15.7
Published: almost 2 years ago

High

GSA_kwCzR0hTQS1wdzI3LXc3dzQtOXFjN84AAZQd

Django XSS Vulnerability
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 37.4
Published: almost 2 years ago

High

GSA_kwCzR0hTQS1jcWY3LWZmOWgtNzk2N84AAYwU

Django ReDoS in validators.URLValidator
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 2 years ago

Moderate

GSA_kwCzR0hTQS1xNXF3LTQzNjQtNWhobc4AAYwZ

Django Vulnerable to HTTP Response Splitting Attack
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 2 years ago

Moderate

GSA_kwCzR0hTQS1wZ3hoLXdmdzQtangyds4AAYdf

Django denial of service via empty session record creation
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 2 years ago

High

GSA_kwCzR0hTQS0zZjJjLWptNnYtY3IzNc4AAYRU

Django DNS Rebinding Vulnerability
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 41.0
Published: almost 2 years ago

Critical

GSA_kwCzR0hTQS1tdjhnLWZoaDYtNjI2N84AAYRT

Django user with hardcoded password created when running tests on Oracle
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 49.6
Published: almost 2 years ago

Moderate

GSA_kwCzR0hTQS05Y3dnLW1oeGYtaGg1Oc4AAYL4

Django Cross-site scripting (XSS) vulnerability via is_safe_url function
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 2 years ago

High

GSA_kwCzR0hTQS1jcmhtLXFwamMtY202NM4AAXr9

Django CSRF Protection Bypass
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 38.0
Published: almost 2 years ago

Moderate

GSA_kwCzR0hTQS1ybTJqLXg1OTUtcTljas4AAXiH

Django Vulnerable to Cache Poisoning
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 2 years ago

Moderate

GSA_kwCzR0hTQS1jOGM4LTk0NzItdzUyaM4AAV-L

Django Cross-site scripting Vulnerability
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 30.9
Published: almost 2 years ago

Moderate

GSA_kwCzR0hTQS12cTNoLTNxN3YtOXByd84AAVFj

Django Allows Open Redirects
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 2 years ago

Moderate

GSA_kwCzR0hTQS1mN2NtLWNjZnAtM3E0cs4AAVFA

Django Incorrectly Validates URLs
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 2 years ago

Moderate

GSA_kwCzR0hTQS02MjVnLWd4OGMteGNtZ84AAVE-

Django Middleware Enables Session Hijacking
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 2 years ago

Moderate

GSA_kwCzR0hTQS0yOTZ3LTZxaHEtZ2Y5Ms4AAU-L

Django denial of service via file upload naming
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 2 years ago

Moderate

GSA_kwCzR0hTQS1yN3c2LXA0N2ctdmo1M83igQ

Django Data leakage via admin history log
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 21.8
Published: almost 2 years ago

Moderate

GSA_kwCzR0hTQS1nOHhnLWpnajYtNDlyM83ifg

Django is vulnerable to Denial of Service attack in formset
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 26.8
Published: almost 2 years ago

Moderate

GSA_kwCzR0hTQS1yNWNqLXd2MjQtOTJwNc285A

Django cross-site request forgery (CSRF) vulnerability
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 2 years ago

Moderate

GSA_kwCzR0hTQS01NHFqLTQ4dngtY3I5Zs22-A

Django Cross-site scripting (XSS) vulnerability
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 2 years ago

Moderate

GSA_kwCzR0hTQS05NXJ3LWZ4OHItMzZ2Ns0opg

Cross-site Scripting in Django
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 30.9
Published: about 2 years ago

High

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXA5OXYtNXczYy1qcXE5

Django Access Control Bypass possibly leading to SSRF, RFI, and LFI attacks
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 38.0
Published: almost 3 years ago

Moderate

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTY4dzgtcWpxMy0yZ2Zt

Path Traversal in Django
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 24.8
Published: almost 3 years ago

High

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW02Z2otaDlnbS1ndzQ0

Django Incorrect Default Permissions
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 38.0
Published: about 3 years ago

High

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZyMjgtNTY5ai01M2M0

Django Incorrect Default Permissions
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 38.0
Published: about 3 years ago

Moderate

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZ2Z2YtNmg2aC0zMzIy

Django Directory Traversal via archive.extract
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 26.8
Published: about 3 years ago

Moderate

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTJtMzQtamNqdi00NXhm

XSS in Django
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 30.9
Published: almost 4 years ago

Moderate

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXdwanItajU3eC13eGZ3

Data leakage via cache key collision in Django
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 29.9
Published: almost 4 years ago

High

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTNnaDIteHc3NC1qbWN3

SQL injection in Django
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 44.5
Published: almost 4 years ago

Critical

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWhtcjQtbTJoNS0zM3F4

SQL injection in Django
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 49.6
Published: about 4 years ago

Critical

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXZmcTYtaHE1ci0yN3I2

Django Potential account hijack via password reset form
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 49.6
Published: over 4 years ago

Moderate

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWh2bWYtcjkyci0yN2hy

Django allows unintended model editing
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 32.9
Published: over 4 years ago

Critical

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTZyOTctY2o1NS05aHJx

SQL Injection in Django
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 49.6
Published: over 4 years ago

High

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWg1anYtNHA3dy02NGpn

Django Denial-of-service in strip_tags()
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 38.0
Published: over 4 years ago

High

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXY5cWctM2o4cC1yNjN2

Uncontrolled Recursion in Django
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 38.0
Published: over 4 years ago

High

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWM0cWgtNHZndi1xYzZn

Django Denial-of-service in django.utils.text.Truncator
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 38.0
Published: over 4 years ago

High

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWg1ODItMnBjaC0zeHYz

Django Denial-of-service by filling session store
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 5 years ago

Moderate

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTZjN3YtMmY0OS04aDI2

Django Incorrect HTTP detection with reverse-proxy connecting via HTTPS
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 26.8
Published: almost 5 years ago

Moderate

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTdycDItZm0yaC13Y2hq

Django Cross-site Scripting in AdminURLFieldWidget
Ecosystems: pypi
Packages: django
Source: GitHub Advisory Database
Blast Radius: 30.9
Published: almost 5 years ago

Moderate

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTZjM2otYzY0bS1xaGdx

XSS in jQuery as used in Drupal, Backdrop CMS, and other products
Ecosystems: maven, nuget, npm, pypi, rubygems
Packages: org.webjars.npm:jquery, jQuery, jquery, django, jquery-rails
Source: GitHub Advisory Database
Blast Radius: 135.8
Published: almost 5 years ago

High

Advisories: 18,124
Packages: 8,239
Repositories: 4
Ecosystems: 12

Filter by Severity

Moderate 7,811 High 6,280 Critical 2,783 Low 966

Filter by Ecosystem

maven 5,516 packagist 3,760 pypi 3,549 npm 3,530 go 1,878 nuget 1,390 rubygems 812 cargo 773 swift 31 hex 29 actions 16 pub 8

Filter by Package

tensorflow 432 tensorflow-cpu 387 tensorflow-gpu 384 django 80 apache-airflow 78 ansible 63 apache-superset 48 rdiffweb 42 plone 42 Pillow 41 vyper 38 salt 38 Plone 36 matrix-synapse 35 opencv-contrib-python 30 opencv-python 30 mlflow 30 Django 21 langchain 18 PaddlePaddle 17 cobbler 17 pillow 15 cryptography 15 paddlepaddle 15 notebook 15 modoboa 14 gradio 14 pyload-ng 14 pyftpdlib 13 nova 13 OctoPrint 12 keystone 12 neutron 12 vantage6 12 calibreweb 11 twisted 11 onionshare-cli 11 urllib3 11 glance 11 Flask-AppBuilder 10 aiohttp 10 opencv-contrib-python-headless 9 ethyca-fides 9 moin 9 kiwitcms 9 Zope 9 opencv-python-headless 9 zope 9 wagtail 9 waitress 9 label-studio 8 numpy 8 aubio 8 lief 7 pysaml2 7 scrapy 7 nautobot 7 jupyter-server 7 python-keystoneclient 7 matrix-sydent 7 swift 7 pip 7 mailman 6 graphite-web 6 pgadmin4 6 inventree 6 sentry 6 ipython 6 lxml 6 Zope2 6 apache-airflow-providers-apache-hive 6 mindsdb 6 web2py 6 tuf 6 bleach 5 saleor 5 requests 5 trytond 5 feedparser 5 lmdb 5 python-gnupg 5 paramiko 5 whoogle-search 5 Products.CMFPlone 5 horizon 5 ckan 5 roundup 5 pyspark 5 jupyterhub 4 yt-dlp 4 datasette 4 ansible-core 4 reportlab 4 starlette 4 keylime 4 grpcio 4 bottle 4 grpc 4 markdown2 4 Pygments 4 werkzeug 4 qutebrowser 4 awsiotsdk 4 FreeTAKServer-UI 4 transformers 4 aws-iot-device-sdk-v2 4 software.amazon.awssdk.iotdevicesdk:aws-iot-device-sdk 4 Flask-Security-Too 4 omero-web 4 oauthenticator 4 pretix 4 PyPDF2 4 esphome 4 nvflare 4 httpie 4 nltk 4 buildbot 4 GitPython 4 Jinja2 4 rsa 3 copyparty 3 Werkzeug 3 localstack 3 cinder 3 apache-iotdb 3 flask 3 sanic 3 fava 3 pyarrow 3 poetry 3 mistune 3 asyncssh 3 jupyterlab 3 Products.PluggableAuthService 3 ecdsa 3 tornado 3 ansible-runner 3 ray 3 aim 3 indy-node 3 openvpn-monitor 3 barbican 3 ujson 3 torchserve 3 jwcrypto 3 ryu 3 mitmproxy 3 bitlyshortener 3 indico 3 apache-airflow-providers-apache-spark 3 plone.app.event 3 plone.app.theming 3 plone.app.dexterity 3 plone.supermodel 3 mayan-edms 3 gerapy 3 pyyaml 3 pandasai 3 tripleo-heat-templates 3 protobuf 3 django-helpdesk 3 apache-libcloud 3 onnx 3 zenml 3 sickrage 3 sqlparse 3 slixmpp 3 asyncua 3 clearml 3 io.grpc:grpc-protobuf 3 docassemble.webapp 3 wger 3 keyring 3 streamlit 3 quokka 3 pywasm3 3 Keystone 3 Weblate 3 wasm3 2 SQLAlchemy 2 flaskcode 2 Google.Protobuf 2 google/protobuf 2 github.com/protocolbuffers/protobuf 2 ubi-reader 2 pyopenssl 2 org.apache.spark:spark-core 2 cabot 2 ajenti 2 pymongo 2 aws-encryption-sdk-cli 2 httplib2 2 starkbank-ecdsa 2 Moin 2 apache-airflow-providers-apache-sqoop 2 certifi 2 mobsf 2 dbt-core 2 typed-ast 2 python-cjson 2

Filter by Repository

https://github.com/django/django 54 https://github.com/pypa/advisory-db 1 https://github.com/jquery/jquery 1