Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

pypi

django

pypi

A high-level Python web framework that encourages rapid development and clean, pragmatic design.

View on github.com · View on pypi.org

Security Advisories for django in pypi

High
3 months ago

Django GeoDjango spatial lookups allow file writes and outbound requests through GDAL raster parsing GSA_kwCzR0hTQS13dnF2LWZqOHctcW1obc4ABhR2

pypi Django
Moderate
3 months ago

Django GeoDjango vulnerable to denial of service through deeply nested geometry collections GSA_kwCzR0hTQS1xMjM4LTVjeG0tNWM5aM4ABhRx

pypi django
Moderate
4 months ago

Django: DomainNameValidator permits newline characters that may enable HTTP header injection GSA_kwCzR0hTQS04cWN4LXhmNDQtMjcyeM4ABaS_

pypi django
Moderate
4 months ago

Django: GDALRaster may over-read heap memory when constructed from bytes GSA_kwCzR0hTQS1jcmhmLTNwZmctdzY4d84ABaTC

pypi django
Low
4 months ago

Django: cache middleware may expose private responses when unrelated request cookies are present GSA_kwCzR0hTQS0zaDlmLXI4NngtcXZqeM4ABaS9

pypi django
Low
5 months ago

Django fails to prevent reuse of a partially-initialized connection after a failed `STARTTLS` handshake GSA_kwCzR0hTQS1tbTZ2LXE4cTktcGdjZs4ABX_r

pypi django
Low
5 months ago

Django: UpdateCacheMiddleware may disclose cached responses due to case-sensitive Cache-Control handling GSA_kwCzR0hTQS04Y2ptLThtcDctcjJ4Zs4ABX_g

pypi django
Low
5 months ago

Django: signed cookies are vulnerable to salt namespace collisions GSA_kwCzR0hTQS1oN3BjLXZ3cDktMjk4Z84ABX_q

pypi django
Low
5 months ago

Django: has_vary_header may expose cached responses when Vary values contain whitespace GSA_kwCzR0hTQS05MjNtLWd2MnAtdzVxcM4ABX_d

pypi django
Low
5 months ago

Django: UpdateCacheMiddleware may disclose private cached responses by omitting Authorization from Vary GSA_kwCzR0hTQS1xcGM4LTdmeGMtY200cM4ABX_k

pypi django
Moderate
6 months ago

Django has an Improper Handling of Length Parameter Inconsistency GSA_kwCzR0hTQS13MjZyLXJtbTgtOWMyOc4ABWME

pypi Django
Low
6 months ago

Django Uses Cache Containing Sensitive Information GSA_kwCzR0hTQS01aHJjLWd2eGotdzU1cM4ABWL8

pypi Django
Low
6 months ago

Django Uses Persistent Cookies Containing Sensitive Information GSA_kwCzR0hTQS03aDJtLW04dmotNTk4aM4ABWLr

pypi Django
Low
7 months ago

Django vulnerable to privilege abuse in GenericInlineModelAdmin GSA_kwCzR0hTQS1wd2pwLWNjamMtZ2h3Z84ABU01

pypi Django
High
7 months ago

Django vulnerable to ASGI header spoofing via underscore/hyphen conflation GSA_kwCzR0hTQS1tdmZxLWdneG0tOW1jNc4ABU0r

pypi Django
Low
7 months ago

Django vulnerable to privilege abuse in ModelAdmin.list_editable GSA_kwCzR0hTQS1tbXdyLTJqaHAtbWM3as4ABU0m

pypi Django
High
7 months ago

Django: SGI requests with a missing or understated `Content-Length` header could bypass the `DATA_UPLOAD_MAX_MEMORY_SIZE` limit GSA_kwCzR0hTQS05MzNoLWhwNTYtaGY3bc4ABU06

pypi Django
Moderate
7 months ago

Django has potential DoS via MultiPartParser through crafted multipart uploads GSA_kwCzR0hTQS01bWY5LWg1M3EtN21occ4ABU0z

pypi Django
High
8 months ago

Django vulnerable to Uncontrolled Resource Consumption GSA_kwCzR0hTQS04cDh2LXdoNzktOXI1Ns4ABTCc

pypi Django
Low
8 months ago

Django has a Race Condition vulnerability GSA_kwCzR0hTQS1tamdoLTc5cWMtNjh3M84ABTCT

pypi Django
High
9 months ago

Django has an SQL Injection issue GSA_kwCzR0hTQS1ndmc4LTkzaDUtZzZxcc4ABR2q

pypi Django
Moderate
9 months ago

Django has an SQL Injection issue GSA_kwCzR0hTQS02NDI2LTlmdjMtNjV4OM4ABR3C

pypi Django
Low
9 months ago

Django has Observable Timing Discrepancy GSA_kwCzR0hTQS0ybWNtLTc5aHgtOGZ4d84ABR29

pypi Django
Low
9 months ago

Django has Inefficient Algorithmic Complexity GSA_kwCzR0hTQS0zM213LXE3cmotbWp3as4ABR3E

pypi Django
Low
9 months ago

Django has Inefficient Algorithmic Complexity GSA_kwCzR0hTQS00cnJyLTJoNHYtZjNqOc4ABR3I

pypi Django
High
9 months ago

Django has an SQL Injection issue GSA_kwCzR0hTQS1td205LTQ2NDgtZjY4cc4ABR3K

pypi Django
Moderate
11 months ago

Django is vulnerable to SQL injection in column aliases GSA_kwCzR0hTQS1ycXcyLWdocTktNDRtN84ABPHw

pypi Django
Moderate
11 months ago

Django is vulnerable to DoS via XML serializer text extraction GSA_kwCzR0hTQS12cmNyLTloajktamNnNs4ABPHx

pypi Django
High
12 months ago

Django has a denial-of-service vulnerability in HttpResponseRedirect and HttpResponsePermanentRedirect on Windows GSA_kwCzR0hTQS1xdzI1LXY2OGMtcWpmM84ABOOa

pypi django
Critical
12 months ago

Django vulnerable to SQL injection via _connector keyword argument in QuerySet and Q objects. GSA_kwCzR0hTQS1mcm12LXByNWYtOW1jcs4ABOOX

pypi django
Low
about 1 year ago

Django vulnerable to partial directory traversal via archives GSA_kwCzR0hTQS1xOTV3LWM3cWctaHJmZs4ABM21

pypi django
High
about 1 year ago

Django vulnerable to SQL injection in column aliases GSA_kwCzR0hTQS1ocHI5LTNtMmctM2o5cM4ABM20

pypi django
High
about 1 year ago

Django is subject to SQL injection through its column aliases GSA_kwCzR0hTQS02dzJyLXIybTUteHE1d84ABL0E

pypi Django
Moderate
over 1 year ago

Django Improper Output Neutralization for Logs vulnerability GSA_kwCzR0hTQS03eHI1LTloY3EtY2hmOc4ABIp6

pypi Django
Moderate
over 1 year ago

Django has a denial-of-service possibility in strip_tags() GSA_kwCzR0hTQS04ajI0LWNqcnEtZ3Iybc4ABHoL

pypi Django
Moderate
over 1 year ago

Django Potential Denial of Service (DoS) on Windows GSA_kwCzR0hTQS13cWZnLW05NmotODV2bc4ABGVX

pypi Django
Moderate
over 1 year ago

Django vulnerable to Allocation of Resources Without Limits or Throttling GSA_kwCzR0hTQS1wM2ZwLTg3NDgtdnFmcc4ABFLi

pypi Django
Moderate
almost 2 years ago

Django has a potential denial-of-service vulnerability in IPv6 validation GSA_kwCzR0hTQS1xY2dnLWoyeDgtaDlnOM4ABDXN

pypi Django
Moderate
almost 2 years ago

Django denial-of-service in django.utils.html.strip_tags() GSA_kwCzR0hTQS04NDk4LTJoNzUtNDcyas4ABCGs

pypi django, Django
High
almost 2 years ago

Django SQL injection in HasKey(lhs, rhs) on Oracle GSA_kwCzR0hTQS1tOWc4LWZ4eG0teGc4Ns4ABCGw

pypi django, Django
Moderate
about 2 years ago

Django vulnerable to denial-of-service attack via the urlize() and urlizetrunc() template filters GSA_kwCzR0hTQS01aGdjLTJ2ZnAtbXF2Y84ABADU

pypi Django
Moderate
about 2 years ago

Django allows enumeration of user e-mail addresses GSA_kwCzR0hTQS1ycnFjLWMyangtNmpnds4ABADW

pypi Django
Moderate
about 2 years ago

Django memory consumption vulnerability GSA_kwCzR0hTQS1qaDc1LTk5aGgtcXZ4Oc4AA-c0

pypi Django
Critical
about 2 years ago

Django SQL injection vulnerability GSA_kwCzR0hTQS1wdjRwLWN3d2ctNHJwaM4AA-c1

pypi Django
Moderate
about 2 years ago

Django vulnerable to denial-of-service attack GSA_kwCzR0hTQS1yODM2LWhoNnYtcmc1Z84AA-cw

pypi Django
Moderate
about 2 years ago

Django vulnerable to a denial-of-service attack GSA_kwCzR0hTQS03OTVjLTl4cGMteHc2Z84AA-cz

pypi Django
High
over 2 years ago

Django vulnerable to Denial of Service GSA_kwCzR0hTQS1xZzJwLTlqd3ItbW1xZs4AA9wQ

pypi Django
High
over 2 years ago

Django vulnerable to Denial of Service GSA_kwCzR0hTQS1mNmY4LTlteDYtOW14Ms4AA9wW

pypi Django
Moderate
over 2 years ago

Django vulnerable to user enumeration attack GSA_kwCzR0hTQS14N3EyLXdyN2cteHFtZs4AA9wR

pypi Django
High
over 2 years ago

Django Path Traversal vulnerability GSA_kwCzR0hTQS05am1mLTIzN2ctcWY0Ns4AA9wT

pypi Django
Moderate
over 2 years ago

Regular expression denial-of-service in Django GSA_kwCzR0hTQS12bThxLW01N2ctcGZmM84AA6CU

pypi django
High
over 2 years ago

Django denial-of-service attack in the intcomma template filter GSA_kwCzR0hTQS14eGo5LWY2cnYtbTN4NM4AA5IP

pypi Django, django
High
almost 3 years ago

Django Denial-of-service in django.utils.text.Truncator GSA_kwCzR0hTQS1oOGdjLXBnajItdmptM84AA25m

pypi Django
Moderate
almost 3 years ago

Django Denial of service vulnerability in django.utils.encoding.uri_to_iri GSA_kwCzR0hTQS03aDRwLTI3bWgtaG1yd84AA25h

pypi django
High
almost 3 years ago

Django potential denial of service vulnerability in UsernameField on Windows GSA_kwCzR0hTQS1xbWY5LTZqcWYtajhmcc4AA23t

pypi Django
High
over 3 years ago

Django has regular expression denial of service vulnerability in EmailValidator/URLValidator GSA_kwCzR0hTQS1qaDN3LTR2dmYtbWpncs4AA0Lg

pypi Django
Critical
over 3 years ago

Django bypasses validation when using one form field to upload multiple files GSA_kwCzR0hTQS1yM3hjLXByZ3ItbWc5cM4AAzG9

pypi Django
High
over 3 years ago

Resource exhaustion in Django GSA_kwCzR0hTQS0yaHJ3LWh4NjctMzR4Ns4AAxpM

pypi Django
High
over 3 years ago

Django contains Uncontrolled Resource Consumption via cached header GSA_kwCzR0hTQS1xMmpmLWg5am0tbTdwNM4AAxVW

pypi django
High
about 4 years ago

Django denial-of-service vulnerability in internationalized URLs GSA_kwCzR0hTQS1xcnc1LTVoMjgtNmNtZ84AAvXa

pypi django
High
about 4 years ago

Django vulnerable to Reflected File Download attack GSA_kwCzR0hTQS04eDk0LWhtamgtOTdocc4AAt78

pypi Django
Critical
over 4 years ago

Django `Trunc()` and `Extract()` database functions vulnerable to SQL Injection GSA_kwCzR0hTQS1wNjR4LThyeHgtd2Y2cc4AAtF-

pypi Django
High
over 4 years ago

Django Image Field Vulnerable to Image Decompression Bombs GSA_kwCzR0hTQS01OXc4LTR3bTItNHh3OM4AAfPe

pypi Django
Critical
over 4 years ago

Django Allows Redirect via Data URL GSA_kwCzR0hTQS03OHZ4LWdnY2gtd2dobc4AAfPg

pypi django
High
over 4 years ago

Django vulnerable to Improper Restriction of Operations within the Bounds of a Memory Buffer GSA_kwCzR0hTQS01aDJxLTRocnAtdjlycs4AAfPc

pypi Django
High
over 4 years ago

Django Allows Arbitrary URL Generation GSA_kwCzR0hTQS0yNjU1LXE0NTMtMjJmOc4AAfNa

pypi django
Moderate
over 4 years ago

XML Entity Expansion (XEE) in Django GSA_kwCzR0hTQS1xcmg3LXg2ZnAtYzJtcM4AAfMI

pypi Django
Moderate
over 4 years ago

XML External Entity (XXE) in Django GSA_kwCzR0hTQS14NjRtLTY4NmYtZm1tM84AAfL2

pypi Django
High
over 4 years ago

Django Directory Traversal via ssi template tag GSA_kwCzR0hTQS12ampwLTlyODMtMjJyY84AAe3i

pypi django
High
over 4 years ago

Django Denial of Service Vulnerability in the authentication framework GSA_kwCzR0hTQS00YzQyLTRyeG0teDZxZs4AAeye

pypi Django
High
over 4 years ago

Django Access Restrictions Bypass GSA_kwCzR0hTQS00Nng0LTlqbXYtamM4cM4AAdCD

pypi django
Moderate
over 4 years ago

Django Cross-site Scripting Vulnerability GSA_kwCzR0hTQS02NTY1LWZnODYtNmpjeM4AAc0O

pypi django
Moderate
over 4 years ago

Django allows user sessions hijacking via an empty string in the session key GSA_kwCzR0hTQS02d2dwLWZ3Zm0tbXhwM84AAct0

pypi Django
Moderate
over 4 years ago

Django settings leak in date template filter GSA_kwCzR0hTQS02d2NyLXdjcW0tM21maM4AAcl8

pypi Django, django
Moderate
over 4 years ago

Django WSGI Header Spoofing Vulnerability GSA_kwCzR0hTQS03cWZ3LWo3aHAtdjQ1Z84AAcfU

pypi Django, django
High
over 4 years ago

Django database denial-of-service with ModelMultipleChoiceField GSA_kwCzR0hTQS02Zzk1LXg2Y2otbWc0ds4AAce7

pypi Django
High
over 4 years ago

Django DoS in django.views.static.serve GSA_kwCzR0hTQS1qaGpnLXcyY3AtNWo0NM4AAce9

pypi Django, django
Moderate
over 4 years ago

Django Cross-site Scripting Vulnerability GSA_kwCzR0hTQS1ndjk4LWc2MjgtbTl4Nc4AAce6

pypi Django, django
Moderate
over 4 years ago

Denial-of-service possibility in logout() view by filling session store GSA_kwCzR0hTQS14MzhtLTQ4NmMtMndyOc4AAcXd

pypi Django
High
over 4 years ago

Django Reuses Cached CSRF Token GSA_kwCzR0hTQS04OWhqLXhmeDUtN3E2Ns4AAcJo

pypi Django
Critical
over 4 years ago

Code Injection in Django GSA_kwCzR0hTQS1ydnE2LW1ycHYtbTZybc4AAcJq

pypi Django
High
over 4 years ago

Django Vulnerable to MySQL Injection GSA_kwCzR0hTQS13cWpqLWh4ODQtdjQ0Oc4AAcJQ

pypi Django
Critical
over 4 years ago

Django Vulnerable to Cache Poisoning GSA_kwCzR0hTQS1xN3EyLXFmMnEtcnczd84AAcJT

pypi Django
Moderate
over 4 years ago

Django cross-site scripting (XSS) vulnerability in the AdminURLFieldWidget widget GSA_kwCzR0hTQS00ODk0LTV2cWMtNnIycs4AAZ0v

pypi django
Moderate
over 4 years ago

Django XSS Vulnerability GSA_kwCzR0hTQS1wdzI3LXc3dzQtOXFjN84AAZQd

pypi Django
Low
over 4 years ago

Django User Enumeration Vulnerability GSA_kwCzR0hTQS1mcDZwLTV4dnctbTc0Zs4AAZQc

pypi django
High
over 4 years ago

Django Vulnerable to HTTP Response Splitting Attack GSA_kwCzR0hTQS1xNXF3LTQzNjQtNWhobc4AAYwZ

pypi Django
High
over 4 years ago

Django ReDoS in validators.URLValidator GSA_kwCzR0hTQS1jcWY3LWZmOWgtNzk2N84AAYwU

pypi Django
Moderate
over 4 years ago

Django denial of service via empty session record creation GSA_kwCzR0hTQS1wZ3hoLXdmdzQtangyds4AAYdf

pypi Django
Critical
over 4 years ago

Django DNS Rebinding Vulnerability GSA_kwCzR0hTQS0zZjJjLWptNnYtY3IzNc4AAYRU

pypi Django
Critical
over 4 years ago

Django user with hardcoded password created when running tests on Oracle GSA_kwCzR0hTQS1tdjhnLWZoaDYtNjI2N84AAYRT

pypi Django
Moderate
over 4 years ago

Django cross-site scripting (XSS) vulnerability via is_safe_url function GSA_kwCzR0hTQS05Y3dnLW1oeGYtaGg1Oc4AAYL4

pypi Django
High
over 4 years ago

Django CSRF Protection Bypass GSA_kwCzR0hTQS1jcmhtLXFwamMtY202NM4AAXr9

pypi django
High
over 4 years ago

Django Might Allow CSRF Requests via URL Verification GSA_kwCzR0hTQS13eGczLW1mcGgtcWc5d84AAXiG

pypi Django
High
over 4 years ago

Django Vulnerable to Cache Poisoning GSA_kwCzR0hTQS1ybTJqLXg1OTUtcTljas4AAXiH

pypi Django, django
Moderate
over 4 years ago

Django Cross-site scripting Vulnerability GSA_kwCzR0hTQS1jOGM4LTk0NzItdzUyaM4AAV-L

pypi django
High
over 4 years ago

Django Allows Open Redirects GSA_kwCzR0hTQS12cTNoLTNxN3YtOXByd84AAVFj

pypi Django
Moderate
over 4 years ago

Django data leakage via querystring manipulation in admin GSA_kwCzR0hTQS1ydzc1LW03Z3AtOTJtM84AAVFB

pypi Django
High
over 4 years ago

Django Incorrectly Validates URLs GSA_kwCzR0hTQS1mN2NtLWNjZnAtM3E0cs4AAVFA

pypi Django
Moderate
over 4 years ago

Django Middleware Enables Session Hijacking GSA_kwCzR0hTQS02MjVnLWd4OGMteGNtZ84AAVE-

pypi Django, django

Match affected ranges for this package. Potential advisories inferred from related packages are excluded.

Filter by Severity

High 65 Moderate 63 Low 17 Critical 16