django (PyPI)
Advisories
598
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 6.1.1 or later clears every advisory below that has a fix.
Upgrade commands
pip
pip install --upgrade "django>=6.1.1"poetry
poetry add "django>=6.1.1"uv
uv add "django>=6.1.1"Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-q238-5cxm-5c9h Django GeoDjango vulnerable to denial of service through deeply nested geometry collections |
Medium EPSS 1.11% |
>= 6.1a1, < 6.1.1 | 6.1.1 |
| GHSA-q238-5cxm-5c9h Django GeoDjango vulnerable to denial of service through deeply nested geometry collections |
Medium EPSS 1.11% |
>= 6.0a1, < 6.0.8 | 6.0.8 |
| GHSA-q238-5cxm-5c9h Django GeoDjango vulnerable to denial of service through deeply nested geometry collections |
Medium EPSS 1.11% |
< 5.2.17 | 5.2.17 |
| GHSA-q238-5cxm-5c9h Django GeoDjango vulnerable to denial of service through deeply nested geometry collections |
Medium EPSS 1.11% |
< 5.2.17>= 6.0, < 6.0.8 | 5.2.176.0.8 |
| GHSA-wvqv-fj8w-qmhm Django GeoDjango spatial lookups allow file writes and outbound requests through GDAL raster parsing |
High EPSS 1.13% |
< 5.2.17>= 6.0a1, < 6.0.8 | 5.2.176.0.8 |
| GHSA-wvqv-fj8w-qmhm Django GeoDjango spatial lookups allow file writes and outbound requests through GDAL raster parsing |
High EPSS 1.13% |
< 5.2.17 | 5.2.17 |
| GHSA-wvqv-fj8w-qmhm Django GeoDjango spatial lookups allow file writes and outbound requests through GDAL raster parsing |
High EPSS 1.13% |
>= 6.0a1, < 6.0.8 | 6.0.8 |
| GHSA-8qcx-xf44-272x Django: DomainNameValidator permits newline characters that may enable HTTP header injection |
Medium EPSS 0.33% |
>= 6.0.0, < 6.0.7 | 6.0.7 |
| GHSA-8qcx-xf44-272x Django: DomainNameValidator permits newline characters that may enable HTTP header injection |
Medium EPSS 0.33% |
< 5.2.16 | 5.2.16 |
| GHSA-8qcx-xf44-272x Django: DomainNameValidator permits newline characters that may enable HTTP header injection |
Medium EPSS 0.33% |
>= 5.2, < 5.2.16>= 6.0, < 6.0.7 | 5.2.166.0.7 |
| GHSA-crhf-3pfg-w68w Django: GDALRaster may over-read heap memory when constructed from bytes |
Medium EPSS 0.53% |
>= 5.2, < 5.2.16>= 6.0, < 6.0.7 | 5.2.166.0.7 |
| GHSA-crhf-3pfg-w68w Django: GDALRaster may over-read heap memory when constructed from bytes |
Medium EPSS 0.53% |
>= 6.0.0, < 6.0.7 | 6.0.7 |
| GHSA-crhf-3pfg-w68w Django: GDALRaster may over-read heap memory when constructed from bytes |
Medium EPSS 0.53% |
< 5.2.16 | 5.2.16 |
| GHSA-3h9f-r86x-qvjx Django: cache middleware may expose private responses when unrelated request cookies are present |
Medium EPSS 0.43% |
>= 6.0.0, < 6.0.7 | 6.0.7 |
| GHSA-3h9f-r86x-qvjx Django: cache middleware may expose private responses when unrelated request cookies are present |
Medium EPSS 0.43% |
< 5.2.16 | 5.2.16 |
| GHSA-3h9f-r86x-qvjx Django: cache middleware may expose private responses when unrelated request cookies are present |
Medium EPSS 0.43% |
>= 5.2, < 5.2.16>= 6.0, < 6.0.7 | 5.2.166.0.7 |
| GHSA-8cjm-8mp7-r2xf Django: UpdateCacheMiddleware may disclose cached responses due to case-sensitive Cache-Control handling |
Medium EPSS 0.27% |
>= 5.2, < 5.2.15>= 6.0, < 6.0.6 | 5.2.156.0.6 |
| GHSA-8cjm-8mp7-r2xf Django: UpdateCacheMiddleware may disclose cached responses due to case-sensitive Cache-Control handling |
Medium EPSS 0.27% |
>= 6.0.0, < 6.0.6 | 6.0.6 |
| GHSA-8cjm-8mp7-r2xf Django: UpdateCacheMiddleware may disclose cached responses due to case-sensitive Cache-Control handling |
Medium EPSS 0.27% |
< 5.2.15 | 5.2.15 |
| GHSA-mm6v-q8q9-pgcf Django fails to prevent reuse of a partially-initialized connection after a failed `STARTTLS` handshake |
Low EPSS 0.15% |
>= 6.0, < 6.0.6 | 6.0.6 |
| GHSA-mm6v-q8q9-pgcf Django fails to prevent reuse of a partially-initialized connection after a failed `STARTTLS` handshake |
Low EPSS 0.15% |
>= 5.2, < 5.2.15>= 6.0, < 6.0.6 | 5.2.156.0.6 |
| GHSA-mm6v-q8q9-pgcf Django fails to prevent reuse of a partially-initialized connection after a failed `STARTTLS` handshake |
Low EPSS 0.15% |
>= 5.2, < 5.2.15 | 5.2.15 |
| GHSA-h7pc-vwp9-298g Django: signed cookies are vulnerable to salt namespace collisions |
Medium EPSS 0.24% |
>= 5.2, < 5.2.15>= 6.0, < 6.0.6 | 5.2.156.0.6 |
| GHSA-h7pc-vwp9-298g Django: signed cookies are vulnerable to salt namespace collisions |
Medium EPSS 0.24% |
< 5.2.15 | 5.2.15 |
| GHSA-h7pc-vwp9-298g Django: signed cookies are vulnerable to salt namespace collisions |
Medium EPSS 0.24% |
>= 6.0.0, < 6.0.6 | 6.0.6 |
| GHSA-923m-gv2p-w5qp Django: has_vary_header may expose cached responses when Vary values contain whitespace |
Medium EPSS 0.37% |
< 5.2.15 | 5.2.15 |
| GHSA-923m-gv2p-w5qp Django: has_vary_header may expose cached responses when Vary values contain whitespace |
Medium EPSS 0.37% |
>= 6.0.0, < 6.0.6 | 6.0.6 |
| GHSA-923m-gv2p-w5qp Django: has_vary_header may expose cached responses when Vary values contain whitespace |
Medium EPSS 0.37% |
>= 5.2, < 5.2.15>= 6.0, < 6.0.6 | 5.2.156.0.6 |
| GHSA-qpc8-7fxc-cm4p Django: UpdateCacheMiddleware may disclose private cached responses by omitting Authorization from Vary |
Low EPSS 0.37% |
>= 6.0.0, < 6.0.6 | 6.0.6 |
| GHSA-qpc8-7fxc-cm4p Django: UpdateCacheMiddleware may disclose private cached responses by omitting Authorization from Vary |
Low EPSS 0.37% |
>= 5.2.0, < 5.2.15 | 5.2.15 |
| GHSA-qpc8-7fxc-cm4p Django: UpdateCacheMiddleware may disclose private cached responses by omitting Authorization from Vary |
Low EPSS 0.37% |
>= 5.2, < 5.2.15>= 6.0, < 6.0.6 | 5.2.156.0.6 |
| GHSA-5hrc-gvxj-w55p Django Uses Cache Containing Sensitive Information |
Medium EPSS 0.36% |
>= 6.0, < 6.0.5 | 6.0.5 |
| GHSA-5hrc-gvxj-w55p Django Uses Cache Containing Sensitive Information |
Medium EPSS 0.36% |
>= 5.2, < 5.2.14>= 6.0, < 6.0.5 | 5.2.146.0.5 |
| GHSA-5hrc-gvxj-w55p Django Uses Cache Containing Sensitive Information |
Medium EPSS 0.36% |
>= 5.2, < 5.2.14 | 5.2.14 |
| GHSA-w26r-rmm8-9c29 Django has an Improper Handling of Length Parameter Inconsistency |
Medium EPSS 0.42% |
>= 5.2, < 5.2.14>= 6.0, < 6.0.5 | 5.2.146.0.5 |
| GHSA-w26r-rmm8-9c29 Django has an Improper Handling of Length Parameter Inconsistency |
Medium EPSS 0.42% |
>= 6.0, < 6.0.5 | 6.0.5 |
| GHSA-w26r-rmm8-9c29 Django has an Improper Handling of Length Parameter Inconsistency |
Medium EPSS 0.42% |
>= 5.2, < 5.2.14 | 5.2.14 |
| GHSA-7h2m-m8vj-598h Django Uses Persistent Cookies Containing Sensitive Information |
Medium EPSS 0.54% |
>= 6.0, < 6.0.5 | 6.0.5 |
| GHSA-7h2m-m8vj-598h Django Uses Persistent Cookies Containing Sensitive Information |
Medium EPSS 0.54% |
>= 5.2, < 5.2.14>= 6.0, < 6.0.5 | 5.2.146.0.5 |
| GHSA-7h2m-m8vj-598h Django Uses Persistent Cookies Containing Sensitive Information |
Medium EPSS 0.54% |
>= 5.2, < 5.2.14 | 5.2.14 |
| GHSA-mmwr-2jhp-mc7j Django vulnerable to privilege abuse in ModelAdmin.list_editable |
Low EPSS 0.29% |
>= 4.2, < 4.2.30 | 4.2.30 |
| GHSA-mmwr-2jhp-mc7j Django vulnerable to privilege abuse in ModelAdmin.list_editable |
Low EPSS 0.29% |
>= 6.0, < 6.0.4 | 6.0.4 |
| GHSA-mmwr-2jhp-mc7j Django vulnerable to privilege abuse in ModelAdmin.list_editable |
Low EPSS 0.29% |
>= 5.2, < 5.2.13 | 5.2.13 |
| GHSA-mmwr-2jhp-mc7j Django vulnerable to privilege abuse in ModelAdmin.list_editable |
Low EPSS 0.29% |
>= 4.2, < 4.2.30>= 5.2, < 5.2.13>= 6.0, < 6.0.4 | 4.2.305.2.136.0.4 |
| GHSA-pwjp-ccjc-ghwg Django vulnerable to privilege abuse in GenericInlineModelAdmin |
Critical EPSS 0.46% |
>= 4.2, < 4.2.30 | 4.2.30 |
| GHSA-pwjp-ccjc-ghwg Django vulnerable to privilege abuse in GenericInlineModelAdmin |
Critical EPSS 0.46% |
>= 4.2, < 4.2.30>= 5.2, < 5.2.13>= 6.0, < 6.0.4 | 4.2.305.2.136.0.4 |
| GHSA-pwjp-ccjc-ghwg Django vulnerable to privilege abuse in GenericInlineModelAdmin |
Critical EPSS 0.46% |
>= 5.2, < 5.2.13 | 5.2.13 |
| GHSA-pwjp-ccjc-ghwg Django vulnerable to privilege abuse in GenericInlineModelAdmin |
Critical EPSS 0.46% |
>= 6.0, < 6.0.4 | 6.0.4 |
| GHSA-mvfq-ggxm-9mc5 Django vulnerable to ASGI header spoofing via underscore/hyphen conflation |
High EPSS 0.44% |
>= 5.2, < 5.2.13 | 5.2.13 |
| GHSA-mvfq-ggxm-9mc5 Django vulnerable to ASGI header spoofing via underscore/hyphen conflation |
High EPSS 0.44% |
>= 6.0, < 6.0.4 | 6.0.4 |
| GHSA-mvfq-ggxm-9mc5 Django vulnerable to ASGI header spoofing via underscore/hyphen conflation |
High EPSS 0.44% |
>= 4.2, < 4.2.30>= 5.2, < 5.2.13>= 6.0, < 6.0.4 | 4.2.305.2.136.0.4 |
| GHSA-mvfq-ggxm-9mc5 Django vulnerable to ASGI header spoofing via underscore/hyphen conflation |
High EPSS 0.44% |
>= 4.2, < 4.2.30 | 4.2.30 |
| GHSA-933h-hp56-hf7m Django: SGI requests with a missing or understated `Content-Length` header could bypass the `DATA_UPLOAD_MAX_MEMORY_SIZE` limit |
High EPSS 0.77% |
>= 4.2, < 4.2.30>= 5.2, < 5.2.13>= 6.0, < 6.0.4 | 4.2.305.2.136.0.4 |
| GHSA-933h-hp56-hf7m Django: SGI requests with a missing or understated `Content-Length` header could bypass the `DATA_UPLOAD_MAX_MEMORY_SIZE` limit |
High EPSS 0.77% |
>= 6.0, < 6.0.4 | 6.0.4 |
| GHSA-933h-hp56-hf7m Django: SGI requests with a missing or understated `Content-Length` header could bypass the `DATA_UPLOAD_MAX_MEMORY_SIZE` limit |
High EPSS 0.77% |
>= 4.2, < 4.2.30 | 4.2.30 |
| GHSA-933h-hp56-hf7m Django: SGI requests with a missing or understated `Content-Length` header could bypass the `DATA_UPLOAD_MAX_MEMORY_SIZE` limit |
High EPSS 0.77% |
>= 5.2, < 5.2.13 | 5.2.13 |
| GHSA-5mf9-h53q-7mhq Django has potential DoS via MultiPartParser through crafted multipart uploads |
Medium EPSS 0.88% |
>= 5.2, < 5.2.13 | 5.2.13 |
| GHSA-5mf9-h53q-7mhq Django has potential DoS via MultiPartParser through crafted multipart uploads |
Medium EPSS 0.88% |
>= 4.2, < 4.2.30>= 5.2, < 5.2.13>= 6.0, < 6.0.4 | 4.2.305.2.136.0.4 |
| GHSA-5mf9-h53q-7mhq Django has potential DoS via MultiPartParser through crafted multipart uploads |
Medium EPSS 0.88% |
>= 6.0, < 6.0.4 | 6.0.4 |
| GHSA-5mf9-h53q-7mhq Django has potential DoS via MultiPartParser through crafted multipart uploads |
Medium EPSS 0.88% |
>= 4.2, < 4.2.30 | 4.2.30 |
| GHSA-mjgh-79qc-68w3 Django has a Race Condition vulnerability |
Low EPSS 0.37% |
>= 6.0, < 6.0.3 | 6.0.3 |
| GHSA-mjgh-79qc-68w3 Django has a Race Condition vulnerability |
Low EPSS 0.37% |
>= 4.2, < 4.2.29>= 5.2, < 5.2.12>= 6.0, < 6.0.3 | 4.2.295.2.126.0.3 |
| GHSA-mjgh-79qc-68w3 Django has a Race Condition vulnerability |
Low EPSS 0.37% |
>= 4.2, < 4.2.29 | 4.2.29 |
| GHSA-mjgh-79qc-68w3 Django has a Race Condition vulnerability |
Low EPSS 0.37% |
>= 5.2, < 5.2.12 | 5.2.12 |
| GHSA-8p8v-wh79-9r56 Django vulnerable to Uncontrolled Resource Consumption |
High EPSS 0.84% |
>= 6.0, < 6.0.3 | 6.0.3 |
| GHSA-8p8v-wh79-9r56 Django vulnerable to Uncontrolled Resource Consumption |
High EPSS 0.84% |
>= 4.2, < 4.2.29>= 5.2, < 5.2.12>= 6.0, < 6.0.3 | 4.2.295.2.126.0.3 |
| GHSA-8p8v-wh79-9r56 Django vulnerable to Uncontrolled Resource Consumption |
High EPSS 0.84% |
>= 4.2, < 4.2.29 | 4.2.29 |
| GHSA-8p8v-wh79-9r56 Django vulnerable to Uncontrolled Resource Consumption |
High EPSS 0.84% |
>= 5.2, < 5.2.12 | 5.2.12 |
| GHSA-6426-9fv3-65x8 Django has an SQL Injection issue |
Medium EPSS 0.90% |
>= 4.2a1, < 4.2.28 | 4.2.28 |
| GHSA-6426-9fv3-65x8 Django has an SQL Injection issue |
Medium EPSS 0.90% |
>= 6.0a1, < 6.0.2 | 6.0.2 |
| GHSA-6426-9fv3-65x8 Django has an SQL Injection issue |
Medium EPSS 0.90% |
>= 5.2a1, < 5.2.11 | 5.2.11 |
| GHSA-6426-9fv3-65x8 Django has an SQL Injection issue |
Medium EPSS 0.90% |
>= 4.2, < 4.2.28>= 5.2, < 5.2.11>= 6.0, < 6.0.2 | 4.2.285.2.116.0.2 |
| GHSA-gvg8-93h5-g6qq Django has an SQL Injection issue |
Medium EPSS 0.84% |
>= 4.2a1, < 4.2.28 | 4.2.28 |
| GHSA-gvg8-93h5-g6qq Django has an SQL Injection issue |
Medium EPSS 0.84% |
>= 6.0a1, < 6.0.2 | 6.0.2 |
| GHSA-gvg8-93h5-g6qq Django has an SQL Injection issue |
Medium EPSS 0.84% |
>= 4.2, < 4.2.28>= 5.2, < 5.2.11>= 6.0, < 6.0.2 | 4.2.285.2.116.0.2 |
| GHSA-gvg8-93h5-g6qq Django has an SQL Injection issue |
Medium EPSS 0.84% |
>= 5.2a1, < 5.2.11 | 5.2.11 |
| GHSA-4rrr-2h4v-f3j9 Django has Inefficient Algorithmic Complexity |
High EPSS 1.11% |
>= 4.2a1, < 4.2.28 | 4.2.28 |
| GHSA-4rrr-2h4v-f3j9 Django has Inefficient Algorithmic Complexity |
High EPSS 1.11% |
>= 6.0a1, < 6.0.2 | 6.0.2 |
| GHSA-4rrr-2h4v-f3j9 Django has Inefficient Algorithmic Complexity |
High EPSS 1.11% |
>= 5.2a1, < 5.2.11 | 5.2.11 |
| GHSA-4rrr-2h4v-f3j9 Django has Inefficient Algorithmic Complexity |
High EPSS 1.11% |
>= 4.2, < 4.2.28>= 5.2, < 5.2.11>= 6.0, < 6.0.2 | 4.2.285.2.116.0.2 |
| GHSA-mwm9-4648-f68q Django has an SQL Injection issue |
Medium EPSS 12.82% |
>= 6.0a1, < 6.0.2 | 6.0.2 |
| GHSA-mwm9-4648-f68q Django has an SQL Injection issue |
Medium EPSS 12.82% |
>= 5.2a1, < 5.2.11 | 5.2.11 |
| GHSA-mwm9-4648-f68q Django has an SQL Injection issue |
Medium EPSS 12.82% |
>= 4.2a1, < 4.2.28 | 4.2.28 |
| GHSA-mwm9-4648-f68q Django has an SQL Injection issue |
Medium EPSS 12.82% |
>= 4.2, < 4.2.28>= 5.2, < 5.2.11>= 6.0, < 6.0.2 | 4.2.285.2.116.0.2 |
| GHSA-33mw-q7rj-mjwj Django has Inefficient Algorithmic Complexity |
High EPSS 1.11% |
>= 5.2a1, < 5.2.11 | 5.2.11 |
| GHSA-33mw-q7rj-mjwj Django has Inefficient Algorithmic Complexity |
High EPSS 1.11% |
>= 4.2, < 4.2.28>= 5.2, < 5.2.11>= 6.0, < 6.0.2 | 4.2.285.2.116.0.2 |
| GHSA-33mw-q7rj-mjwj Django has Inefficient Algorithmic Complexity |
High EPSS 1.11% |
>= 4.2a1, < 4.2.28 | 4.2.28 |
| GHSA-33mw-q7rj-mjwj Django has Inefficient Algorithmic Complexity |
High EPSS 1.11% |
>= 6.0a1, < 6.0.2 | 6.0.2 |
| GHSA-2mcm-79hx-8fxw Django has Observable Timing Discrepancy |
Medium EPSS 0.80% |
>= 6.0a1, < 6.0.2 | 6.0.2 |
| GHSA-2mcm-79hx-8fxw Django has Observable Timing Discrepancy |
Medium EPSS 0.80% |
>= 4.2, < 4.2.28>= 5.2, < 5.2.11>= 6.0, < 6.0.2 | 4.2.285.2.116.0.2 |
| GHSA-2mcm-79hx-8fxw Django has Observable Timing Discrepancy |
Medium EPSS 0.80% |
>= 4.2a1, < 4.2.28 | 4.2.28 |
| GHSA-2mcm-79hx-8fxw Django has Observable Timing Discrepancy |
Medium EPSS 0.80% |
>= 5.2a1, < 5.2.11 | 5.2.11 |
| GHSA-vrcr-9hj9-jcg6 Django is vulnerable to DoS via XML serializer text extraction |
High EPSS 2.08% |
>= 5.2a1, < 5.2.9 | 5.2.9 |
| GHSA-vrcr-9hj9-jcg6 Django is vulnerable to DoS via XML serializer text extraction |
High EPSS 2.08% |
>= 4.2, < 4.2.27>= 5.1, < 5.1.15>= 5.2, < 5.2.9 | 4.2.275.1.155.2.9 |
| GHSA-vrcr-9hj9-jcg6 Django is vulnerable to DoS via XML serializer text extraction |
High EPSS 2.08% |
>= 4.2a1, < 4.2.27 | 4.2.27 |
| GHSA-vrcr-9hj9-jcg6 Django is vulnerable to DoS via XML serializer text extraction |
High EPSS 2.08% |
>= 5.1a1, < 5.1.15 | 5.1.15 |
| GHSA-rqw2-ghq9-44m7 Django is vulnerable to SQL injection in column aliases |
Medium EPSS 0.92% |
>= 5.1a1, < 5.1.15 | 5.1.15 |
| GHSA-rqw2-ghq9-44m7 Django is vulnerable to SQL injection in column aliases |
Medium EPSS 0.92% |
>= 4.2, < 4.2.27>= 5.1, < 5.1.15>= 5.2, < 5.2.9 | 4.2.275.1.155.2.9 |
| GHSA-rqw2-ghq9-44m7 Django is vulnerable to SQL injection in column aliases |
Medium EPSS 0.92% |
>= 4.2a1, < 4.2.27 | 4.2.27 |
| GHSA-rqw2-ghq9-44m7 Django is vulnerable to SQL injection in column aliases |
Medium EPSS 0.92% |
>= 5.2a1, < 5.2.9 | 5.2.9 |
| GHSA-frmv-pr5f-9mcr Django vulnerable to SQL injection via _connector keyword argument in QuerySet and Q objects. |
Critical EPSS 19.26% |
>= 4.2, < 4.2.26>= 5.1, < 5.1.14>= 5.2, < 5.2.8 | 4.2.265.1.145.2.8 |
| GHSA-frmv-pr5f-9mcr Django vulnerable to SQL injection via _connector keyword argument in QuerySet and Q objects. |
Critical EPSS 19.26% |
>= 5.0a1, < 5.1.14 | 5.1.14 |
| GHSA-frmv-pr5f-9mcr Django vulnerable to SQL injection via _connector keyword argument in QuerySet and Q objects. |
Critical EPSS 19.26% |
< 4.2.26 | 4.2.26 |
| GHSA-frmv-pr5f-9mcr Django vulnerable to SQL injection via _connector keyword argument in QuerySet and Q objects. |
Critical EPSS 19.26% |
>= 5.2a1, < 5.2.8 | 5.2.8 |
| GHSA-qw25-v68c-qjf3 Django has a denial-of-service vulnerability in HttpResponseRedirect and HttpResponsePermanentRedirect on Windows |
High EPSS 1.91% |
>= 5.2a1, < 5.2.8 | 5.2.8 |
| GHSA-qw25-v68c-qjf3 Django has a denial-of-service vulnerability in HttpResponseRedirect and HttpResponsePermanentRedirect on Windows |
High EPSS 1.91% |
>= 4.2, < 4.2.26>= 5.1, < 5.1.14>= 5.2, < 5.2.8 | 4.2.265.1.145.2.8 |
| GHSA-qw25-v68c-qjf3 Django has a denial-of-service vulnerability in HttpResponseRedirect and HttpResponsePermanentRedirect on Windows |
High EPSS 1.91% |
< 4.2.26 | 4.2.26 |
| GHSA-qw25-v68c-qjf3 Django has a denial-of-service vulnerability in HttpResponseRedirect and HttpResponsePermanentRedirect on Windows |
High EPSS 1.91% |
>= 5.0a1, < 5.1.14 | 5.1.14 |
| GHSA-q95w-c7qg-hrff Django vulnerable to partial directory traversal via archives |
Medium EPSS 0.93% |
>= 4.2, < 4.2.25 | 4.2.25 |
| GHSA-q95w-c7qg-hrff Django vulnerable to partial directory traversal via archives |
Medium EPSS 0.93% |
>= 4.2, < 4.2.25>= 5.1, < 5.1.13>= 5.2, < 5.2.7 | 4.2.255.1.135.2.7 |
| GHSA-q95w-c7qg-hrff Django vulnerable to partial directory traversal via archives |
Medium EPSS 0.93% |
>= 5.2, < 5.2.7 | 5.2.7 |
| GHSA-q95w-c7qg-hrff Django vulnerable to partial directory traversal via archives |
Medium EPSS 0.93% |
>= 5.1, < 5.1.13 | 5.1.13 |
| GHSA-hpr9-3m2g-3j9p Django vulnerable to SQL injection in column aliases |
Critical EPSS 0.64% |
>= 5.1, < 5.1.13 | 5.1.13 |
| GHSA-hpr9-3m2g-3j9p Django vulnerable to SQL injection in column aliases |
Critical EPSS 0.64% |
>= 4.2, < 4.2.25>= 5.1, < 5.1.13>= 5.2, < 5.2.7 | 4.2.255.1.135.2.7 |
| GHSA-hpr9-3m2g-3j9p Django vulnerable to SQL injection in column aliases |
Critical EPSS 0.64% |
>= 5.2, < 5.2.7 | 5.2.7 |
| GHSA-hpr9-3m2g-3j9p Django vulnerable to SQL injection in column aliases |
Critical EPSS 0.64% |
>= 4.2, < 4.2.25 | 4.2.25 |
| GHSA-6w2r-r2m5-xq5w Django is subject to SQL injection through its column aliases |
High EPSS 26.11% |
>= 5.0a1, < 5.1.12 | 5.1.12 |
| GHSA-6w2r-r2m5-xq5w Django is subject to SQL injection through its column aliases |
High EPSS 26.11% |
>= 4.2, < 4.2.24>= 5.1, < 5.1.12>= 5.2, < 5.2.6 | 4.2.245.1.125.2.6 |
| GHSA-6w2r-r2m5-xq5w Django is subject to SQL injection through its column aliases |
High EPSS 26.11% |
>= 5.2a1, < 5.2.6 | 5.2.6 |
| GHSA-6w2r-r2m5-xq5w Django is subject to SQL injection through its column aliases |
High EPSS 26.11% |
< 4.2.24 | 4.2.24 |
| GHSA-7xr5-9hcq-chf9 Django Improper Output Neutralization for Logs vulnerability |
Medium EPSS 0.75% |
>= 5.0a1, < 5.1.10 | 5.1.10 |
| GHSA-7xr5-9hcq-chf9 Django Improper Output Neutralization for Logs vulnerability |
Medium EPSS 0.75% |
>= 5.2, < 5.2.2>= 5.1, < 5.1.10>= 4.2, < 4.2.22 | 4.2.225.1.105.2.2 |
| GHSA-7xr5-9hcq-chf9 Django Improper Output Neutralization for Logs vulnerability |
Medium EPSS 0.75% |
< 4.2.22 | 4.2.22 |
| GHSA-7xr5-9hcq-chf9 Django Improper Output Neutralization for Logs vulnerability |
Medium EPSS 0.75% |
>= 5.2, < 5.2.2 | 5.2.2 |
| GHSA-8j24-cjrq-gr2m Django has a denial-of-service possibility in strip_tags() |
Medium EPSS 14.31% |
>= 5.1, < 5.1.9 | 5.1.9 |
| GHSA-8j24-cjrq-gr2m Django has a denial-of-service possibility in strip_tags() |
Medium EPSS 14.31% |
>= 4.2, < 4.2.21>= 5.1, < 5.1.9>= 5.2, < 5.2.1 | 4.2.215.1.95.2.1 |
| GHSA-8j24-cjrq-gr2m Django has a denial-of-service possibility in strip_tags() |
Medium EPSS 14.31% |
>= 5.2, < 5.2.1 | 5.2.1 |
| GHSA-8j24-cjrq-gr2m Django has a denial-of-service possibility in strip_tags() |
Medium EPSS 14.31% |
>= 4.2, < 4.2.21 | 4.2.21 |
| GHSA-wqfg-m96j-85vm Django Potential Denial of Service (DoS) on Windows |
High EPSS 1.08% |
>= 5.1, < 5.1.8>= 5.0, < 5.0.14 | 5.0.145.1.8 |
| GHSA-wqfg-m96j-85vm Django Potential Denial of Service (DoS) on Windows |
High EPSS 1.08% |
>= 5.0, < 5.0.14 | 5.0.14 |
| GHSA-wqfg-m96j-85vm Django Potential Denial of Service (DoS) on Windows |
High EPSS 1.08% |
>= 5.1, < 5.1.8 | 5.1.8 |
| GHSA-p3fp-8748-vqfq Django vulnerable to Allocation of Resources Without Limits or Throttling |
High EPSS 0.83% |
>= 5.1, < 5.1.7>= 5.0, < 5.0.13>= 4.2, < 4.2.20 | 4.2.205.0.135.1.7 |
| GHSA-p3fp-8748-vqfq Django vulnerable to Allocation of Resources Without Limits or Throttling |
High EPSS 0.83% |
>= 4.2, < 4.2.20 | 4.2.20 |
| GHSA-p3fp-8748-vqfq Django vulnerable to Allocation of Resources Without Limits or Throttling |
High EPSS 0.83% |
>= 5.0, < 5.0.13 | 5.0.13 |
| GHSA-p3fp-8748-vqfq Django vulnerable to Allocation of Resources Without Limits or Throttling |
High EPSS 0.83% |
>= 5.1, < 5.1.7 | 5.1.7 |
| GHSA-qcgg-j2x8-h9g8 Django has a potential denial-of-service vulnerability in IPv6 validation |
High EPSS 1.28% |
>= 5.1, < 5.1.5 | 5.1.5 |
| GHSA-qcgg-j2x8-h9g8 Django has a potential denial-of-service vulnerability in IPv6 validation |
High EPSS 1.28% |
>= 4.2, < 4.2.18 | 4.2.18 |
| GHSA-qcgg-j2x8-h9g8 Django has a potential denial-of-service vulnerability in IPv6 validation |
High EPSS 1.28% |
>= 5.1, < 5.1.5>= 5.0, < 5.0.11>= 4.2, < 4.2.18 | 4.2.185.0.115.1.5 |
| GHSA-qcgg-j2x8-h9g8 Django has a potential denial-of-service vulnerability in IPv6 validation |
High EPSS 1.28% |
>= 5.0, < 5.0.11 | 5.0.11 |
| GHSA-m9g8-fxxm-xg86 Django SQL injection in HasKey(lhs, rhs) on Oracle |
Critical EPSS 1.42% |
>= 5.1.0, < 5.1.4 | 5.1.4 |
| GHSA-m9g8-fxxm-xg86 Django SQL injection in HasKey(lhs, rhs) on Oracle |
Critical EPSS 1.42% |
>= 5.1, < 5.1.4 | 5.1.4 |
| GHSA-m9g8-fxxm-xg86 Django SQL injection in HasKey(lhs, rhs) on Oracle |
Critical EPSS 1.42% |
>= 5.0, < 5.0.10 | 5.0.10 |
| GHSA-m9g8-fxxm-xg86 Django SQL injection in HasKey(lhs, rhs) on Oracle |
Critical EPSS 1.42% |
>= 4.2, < 4.2.17 | 4.2.17 |
| GHSA-m9g8-fxxm-xg86 Django SQL injection in HasKey(lhs, rhs) on Oracle |
Critical EPSS 1.42% |
>= 5.1, < 5.1.4>= 5.0, < 5.0.10>= 4.2, < 4.2.17 | 4.2.175.0.105.1.4 |
| GHSA-m9g8-fxxm-xg86 Django SQL injection in HasKey(lhs, rhs) on Oracle |
Critical EPSS 1.42% |
>= 5.0.0, < 5.0.10 | 5.0.10 |
| GHSA-m9g8-fxxm-xg86 Django SQL injection in HasKey(lhs, rhs) on Oracle |
Critical EPSS 1.42% |
>= 4.2.0, < 4.2.17 | 4.2.17 |
| GHSA-8498-2h75-472j Django denial-of-service in django.utils.html.strip_tags() |
High EPSS 1.39% |
>= 5.0, < 5.0.10 | 5.0.10 |
| GHSA-8498-2h75-472j Django denial-of-service in django.utils.html.strip_tags() |
High EPSS 1.39% |
>= 5.1.0, < 5.1.4 | 5.1.4 |
| GHSA-8498-2h75-472j Django denial-of-service in django.utils.html.strip_tags() |
High EPSS 1.39% |
>= 4.2.0, < 4.2.17 | 4.2.17 |
| GHSA-8498-2h75-472j Django denial-of-service in django.utils.html.strip_tags() |
High EPSS 1.39% |
>= 5.0.0, < 5.0.10 | 5.0.10 |
| GHSA-8498-2h75-472j Django denial-of-service in django.utils.html.strip_tags() |
High EPSS 1.39% |
>= 5.1, < 5.1.4 | 5.1.4 |
| GHSA-8498-2h75-472j Django denial-of-service in django.utils.html.strip_tags() |
High EPSS 1.39% |
>= 4.2, < 4.2.17 | 4.2.17 |
| GHSA-8498-2h75-472j Django denial-of-service in django.utils.html.strip_tags() |
High EPSS 1.39% |
>= 5.1, < 5.1.4>= 5.0, < 5.0.10>= 4.2, < 4.2.17 | 4.2.175.0.105.1.4 |
| GHSA-rrqc-c2jx-6jgv Django allows enumeration of user e-mail addresses |
Medium EPSS 0.79% |
< 4.2.16 | 4.2.16 |
| GHSA-rrqc-c2jx-6jgv Django allows enumeration of user e-mail addresses |
Medium EPSS 0.79% |
< 4.2.16>= 5.0, < 5.0.9>= 5.1, < 5.1.1 | 4.2.165.0.95.1.1 |
| GHSA-rrqc-c2jx-6jgv Django allows enumeration of user e-mail addresses |
Medium EPSS 0.79% |
>= 5.0, < 5.0.9 | 5.0.9 |
| GHSA-rrqc-c2jx-6jgv Django allows enumeration of user e-mail addresses |
Medium EPSS 0.79% |
>= 5.1, < 5.1.1 | 5.1.1 |
| GHSA-5hgc-2vfp-mqvc Django vulnerable to denial-of-service attack via the urlize() and urlizetrunc() template filters |
High EPSS 25.77% |
>= 5.1, < 5.1.1 | 5.1.1 |
| GHSA-5hgc-2vfp-mqvc Django vulnerable to denial-of-service attack via the urlize() and urlizetrunc() template filters |
High EPSS 25.77% |
>= 5.1, < 5.1.1>= 5.0, < 5.0.9>= 4.2, < 4.2.16 | 4.2.165.0.95.1.1 |
| GHSA-5hgc-2vfp-mqvc Django vulnerable to denial-of-service attack via the urlize() and urlizetrunc() template filters |
High EPSS 25.77% |
>= 4.2, < 4.2.16 | 4.2.16 |
| GHSA-5hgc-2vfp-mqvc Django vulnerable to denial-of-service attack via the urlize() and urlizetrunc() template filters |
High EPSS 25.77% |
>= 5.0, < 5.0.9 | 5.0.9 |
| GHSA-jh75-99hh-qvx9 Django memory consumption vulnerability |
High EPSS 1.20% |
>= 4.2, < 4.2.15 | 4.2.15 |
| GHSA-jh75-99hh-qvx9 Django memory consumption vulnerability |
High EPSS 1.20% |
>= 5.0, < 5.0.8 | 5.0.8 |
| GHSA-795c-9xpc-xw6g Django vulnerable to a denial-of-service attack |
High EPSS 1.26% |
>= 5.0, < 5.0.8>= 4.2, < 4.2.15 | 4.2.155.0.8 |
| GHSA-795c-9xpc-xw6g Django vulnerable to a denial-of-service attack |
High EPSS 1.26% |
>= 5.0, < 5.0.8 | 5.0.8 |
| GHSA-795c-9xpc-xw6g Django vulnerable to a denial-of-service attack |
High EPSS 1.26% |
>= 4.2, < 4.2.15 | 4.2.15 |
| GHSA-r836-hh6v-rg5g Django vulnerable to denial-of-service attack |
High EPSS 0.95% |
>= 5.0, < 5.0.8>= 4.2, < 4.2.15 | 4.2.155.0.8 |
| GHSA-r836-hh6v-rg5g Django vulnerable to denial-of-service attack |
High EPSS 0.95% |
>= 4.2, < 4.2.15 | 4.2.15 |
| GHSA-r836-hh6v-rg5g Django vulnerable to denial-of-service attack |
High EPSS 0.95% |
>= 5.0, < 5.0.8 | 5.0.8 |
| GHSA-pv4p-cwwg-4rph Django SQL injection vulnerability |
High EPSS 1.50% |
>= 5.0, < 5.0.8>= 4.2, < 4.2.15 | 4.2.155.0.8 |
| GHSA-pv4p-cwwg-4rph Django SQL injection vulnerability |
High EPSS 1.50% |
>= 4.2, < 4.2.15 | 4.2.15 |
| GHSA-pv4p-cwwg-4rph Django SQL injection vulnerability |
High EPSS 1.50% |
>= 5.0, < 5.0.8 | 5.0.8 |
| GHSA-jh75-99hh-qvx9 Django memory consumption vulnerability |
High EPSS 1.20% |
>= 5.0, < 5.0.8>= 4.2, < 4.2.15 | 4.2.155.0.8 |
| GHSA-f6f8-9mx6-9mx2 Django vulnerable to Denial of Service |
High EPSS 28.64% |
>= 5.0, < 5.0.7 | 5.0.7 |
| GHSA-x7q2-wr7g-xqmf Django vulnerable to user enumeration attack |
Medium EPSS 0.89% |
>= 5.0, < 5.0.7>= 4.2, < 4.2.14 | 4.2.145.0.7 |
| GHSA-x7q2-wr7g-xqmf Django vulnerable to user enumeration attack |
Medium EPSS 0.89% |
>= 4.2, < 4.2.14 | 4.2.14 |
| GHSA-x7q2-wr7g-xqmf Django vulnerable to user enumeration attack |
Medium EPSS 0.89% |
>= 5.0, < 5.0.7 | 5.0.7 |
| GHSA-qg2p-9jwr-mmqf Django vulnerable to Denial of Service |
High EPSS 1.19% |
>= 4.2, < 4.2.14>= 5.0, < 5.0.7 | 4.2.145.0.7 |
| GHSA-qg2p-9jwr-mmqf Django vulnerable to Denial of Service |
High EPSS 1.19% |
>= 5.0, < 5.0.7 | 5.0.7 |
| GHSA-qg2p-9jwr-mmqf Django vulnerable to Denial of Service |
High EPSS 1.19% |
>= 4.2, < 4.2.14 | 4.2.14 |
| GHSA-f6f8-9mx6-9mx2 Django vulnerable to Denial of Service |
High EPSS 28.64% |
>= 5.0, < 5.0.7>= 4.2, < 4.2.14 | 4.2.145.0.7 |
| GHSA-f6f8-9mx6-9mx2 Django vulnerable to Denial of Service |
High EPSS 28.64% |
>= 4.2, < 4.2.14 | 4.2.14 |
| GHSA-9jmf-237g-qf46 Django Path Traversal vulnerability |
Medium EPSS 1.01% |
>= 5.0, < 5.0.7>= 4.2, < 4.2.14 | 4.2.145.0.7 |
| GHSA-9jmf-237g-qf46 Django Path Traversal vulnerability |
Medium EPSS 1.01% |
>= 4.2, < 4.2.14 | 4.2.14 |
| GHSA-9jmf-237g-qf46 Django Path Traversal vulnerability |
Medium EPSS 1.01% |
>= 5.0, < 5.0.7 | 5.0.7 |
| GHSA-vm8q-m57g-pff3 Regular expression denial-of-service in Django |
Medium EPSS 1.85% |
>= 3.2, < 3.2.25 | 3.2.25 |
| GHSA-vm8q-m57g-pff3 Regular expression denial-of-service in Django |
Medium EPSS 1.85% |
>= 5.0, < 5.0.3 | 5.0.3 |
| GHSA-vm8q-m57g-pff3 Regular expression denial-of-service in Django |
Medium EPSS 1.85% |
>= 3.2, < 3.2.25>= 4.2, < 4.2.11>= 5.0, < 5.0.3 | 3.2.254.2.115.0.3 |
| GHSA-vm8q-m57g-pff3 Regular expression denial-of-service in Django |
Medium EPSS 1.85% |
>= 4.2, < 4.2.11 | 4.2.11 |
| GHSA-xxj9-f6rv-m3x4 Django denial-of-service attack in the intcomma template filter |
High EPSS 1.61% |
>= 4.2, < 4.2.10 | 4.2.10 |
| GHSA-xxj9-f6rv-m3x4 Django denial-of-service attack in the intcomma template filter |
High EPSS 1.61% |
>= 3.2, < 3.2.24>= 4.2, < 4.2.10>= 5.0, < 5.0.2 | 3.2.244.2.105.0.2 |
| GHSA-xxj9-f6rv-m3x4 Django denial-of-service attack in the intcomma template filter |
High EPSS 1.61% |
>= 5.0, < 5.0.2 | 5.0.2 |
| GHSA-xxj9-f6rv-m3x4 Django denial-of-service attack in the intcomma template filter |
High EPSS 1.61% |
>= 3.2, < 3.2.24 | 3.2.24 |
| GHSA-7h4p-27mh-hmrw Django Denial of service vulnerability in django.utils.encoding.uri_to_iri |
High EPSS 1.52% |
>= 4.1, < 4.1.11 | 4.1.11 |
| GHSA-7h4p-27mh-hmrw Django Denial of service vulnerability in django.utils.encoding.uri_to_iri |
High EPSS 1.52% |
>= 4.2, < 4.2.5 | 4.2.5 |
| GHSA-7h4p-27mh-hmrw Django Denial of service vulnerability in django.utils.encoding.uri_to_iri |
High EPSS 1.52% |
>= 3.2, < 3.2.21>= 4.1, < 4.1.11>= 4.2, < 4.2.5 | 3.2.214.1.114.2.5 |
| GHSA-h8gc-pgj2-vjm3 Django Denial-of-service in django.utils.text.Truncator |
High EPSS 1.46% |
>= 4.2a1, < 4.2.6 | 4.2.6 |
| GHSA-h8gc-pgj2-vjm3 Django Denial-of-service in django.utils.text.Truncator |
High EPSS 1.46% |
>= 4.1a1, < 4.1.12 | 4.1.12 |
| GHSA-h8gc-pgj2-vjm3 Django Denial-of-service in django.utils.text.Truncator |
High EPSS 1.46% |
>= 3.2a1, < 3.2.22 | 3.2.22 |
| GHSA-7h4p-27mh-hmrw Django Denial of service vulnerability in django.utils.encoding.uri_to_iri |
High EPSS 1.52% |
>= 3.2, < 3.2.21 | 3.2.21 |
| GHSA-h8gc-pgj2-vjm3 Django Denial-of-service in django.utils.text.Truncator |
High EPSS 1.46% |
>= 3.2, < 3.2.22>= 4.1, < 4.1.12>= 4.2, < 4.2.6 | 3.2.224.1.124.2.6 |
| GHSA-qmf9-6jqf-j8fq Django potential denial of service vulnerability in UsernameField on Windows |
High EPSS 49.77% |
>= 4.1a1, < 4.1.13 | 4.1.13 |
| GHSA-qmf9-6jqf-j8fq Django potential denial of service vulnerability in UsernameField on Windows |
High EPSS 49.77% |
>= 3.2a1, < 3.2.23 | 3.2.23 |
| GHSA-qmf9-6jqf-j8fq Django potential denial of service vulnerability in UsernameField on Windows |
High EPSS 49.77% |
>= 4.2a1, < 4.2.7 | 4.2.7 |
| GHSA-qmf9-6jqf-j8fq Django potential denial of service vulnerability in UsernameField on Windows |
High EPSS 49.77% |
>= 3.2, < 3.2.23>= 4.1, < 4.1.13>= 4.2, < 4.2.7 | 3.2.234.1.134.2.7 |
| GHSA-jh3w-4vvf-mjgr Django has regular expression denial of service vulnerability in EmailValidator/URLValidator |
High EPSS 2.98% |
>= 4.2a1, < 4.2.3 | 4.2.3 |
| GHSA-jh3w-4vvf-mjgr Django has regular expression denial of service vulnerability in EmailValidator/URLValidator |
High EPSS 2.98% |
>= 3.2a1, < 3.2.20 | 3.2.20 |
| GHSA-jh3w-4vvf-mjgr Django has regular expression denial of service vulnerability in EmailValidator/URLValidator |
High EPSS 2.98% |
>= 4.0a1, < 4.1.10 | 4.1.10 |
| GHSA-jh3w-4vvf-mjgr Django has regular expression denial of service vulnerability in EmailValidator/URLValidator |
High EPSS 2.98% |
>= 4.2, < 4.2.3>= 4.0, < 4.1.10>= 3.2, < 3.2.20 | 3.2.204.1.104.2.3 |
| GHSA-r3xc-prgr-mg9p Django bypasses validation when using one form field to upload multiple files |
Critical EPSS 1.39% |
>= 4.0a1, < 4.1.9 | 4.1.9 |
| GHSA-r3xc-prgr-mg9p Django bypasses validation when using one form field to upload multiple files |
Critical EPSS 1.39% |
>= 3.2a1, < 3.2.19 | 3.2.19 |
| GHSA-r3xc-prgr-mg9p Django bypasses validation when using one form field to upload multiple files |
Critical EPSS 1.39% |
>= 3.2, < 3.2.19>= 4.0, < 4.1.9>= 4.2, < 4.2.1 | 3.2.194.1.94.2.1 |
| GHSA-r3xc-prgr-mg9p Django bypasses validation when using one form field to upload multiple files |
Critical EPSS 1.39% |
>= 4.2a1, < 4.2.1 | 4.2.1 |
| GHSA-2hrw-hx67-34x6 Resource exhaustion in Django |
High EPSS 62.58% |
>= 4.0a1, < 4.0.10 | 4.0.10 |
| GHSA-2hrw-hx67-34x6 Resource exhaustion in Django |
High EPSS 62.58% |
>= 3.2, < 3.2.18>= 4.0, < 4.0.10>= 4.1, < 4.1.7 | 3.2.184.0.104.1.7 |
| GHSA-2hrw-hx67-34x6 Resource exhaustion in Django |
High EPSS 62.58% |
>= 4.1a1, < 4.1.7 | 4.1.7 |
| GHSA-2hrw-hx67-34x6 Resource exhaustion in Django |
High EPSS 62.58% |
>= 3.2a1, < 3.2.18 | 3.2.18 |
| GHSA-q2jf-h9jm-m7p4 Django contains Uncontrolled Resource Consumption via cached header |
High EPSS 47.38% |
>= 3.2, < 3.2.17>= 4.0, < 4.0.9>= 4.1, < 4.1.6 | 3.2.174.0.94.1.6 |
| GHSA-q2jf-h9jm-m7p4 Django contains Uncontrolled Resource Consumption via cached header |
High EPSS 47.38% |
>= 3.2a1, < 3.2.17 | 3.2.17 |
| GHSA-q2jf-h9jm-m7p4 Django contains Uncontrolled Resource Consumption via cached header |
High EPSS 47.38% |
>= 4.0a1, < 4.0.9 | 4.0.9 |
| GHSA-q2jf-h9jm-m7p4 Django contains Uncontrolled Resource Consumption via cached header |
High EPSS 47.38% |
>= 4.1a1, < 4.1.6 | 4.1.6 |
| GHSA-qrw5-5h28-6cmg Django denial-of-service vulnerability in internationalized URLs |
High EPSS 3.75% |
>= 3.2, < 3.2.16>= 4.0, < 4.0.8>= 4.1, < 4.1.2 | 3.2.164.0.84.1.2 |
| GHSA-qrw5-5h28-6cmg Django denial-of-service vulnerability in internationalized URLs |
High EPSS 3.75% |
>= 3.2, < 3.2.16 | 3.2.16 |
| GHSA-qrw5-5h28-6cmg Django denial-of-service vulnerability in internationalized URLs |
High EPSS 3.75% |
>= 4.0, < 4.0.8 | 4.0.8 |
| GHSA-qrw5-5h28-6cmg Django denial-of-service vulnerability in internationalized URLs |
High EPSS 3.75% |
>= 4.1, < 4.1.2 | 4.1.2 |
| GHSA-8x94-hmjh-97hq Django vulnerable to Reflected File Download attack |
High EPSS 0.94% |
>= 3.2, < 3.2.15>= 4.0, < 4.0.7 | 3.2.154.0.7 |
| GHSA-8x94-hmjh-97hq Django vulnerable to Reflected File Download attack |
High EPSS 0.94% |
>= 4.0, < 4.0.7 | 4.0.7 |
| GHSA-8x94-hmjh-97hq Django vulnerable to Reflected File Download attack |
High EPSS 0.94% |
< 3.2.15 | 3.2.15 |
| GHSA-p64x-8rxx-wf6q Django `Trunc()` and `Extract()` database functions vulnerable to SQL Injection |
Critical EPSS 73.61% |
>= 3.2a1, < 3.2.14 | 3.2.14 |
| GHSA-p64x-8rxx-wf6q Django `Trunc()` and `Extract()` database functions vulnerable to SQL Injection |
Critical EPSS 73.61% |
>= 3.2, < 3.2.14>= 4.0, < 4.0.6 | 3.2.144.0.6 |
| GHSA-p64x-8rxx-wf6q Django `Trunc()` and `Extract()` database functions vulnerable to SQL Injection |
Critical EPSS 73.61% |
>= 4.0a1, < 4.0.6 | 4.0.6 |
| GHSA-qrh7-x6fp-c2mp XML Entity Expansion (XEE) in Django |
Medium EPSS 4.77% |
>= 1.4.0, < 1.4.4 | 1.4.4 |
| GHSA-qrh7-x6fp-c2mp XML Entity Expansion (XEE) in Django |
Medium EPSS 4.77% |
>= 1.3.0, < 1.3.6 | 1.3.6 |
| GHSA-qrh7-x6fp-c2mp XML Entity Expansion (XEE) in Django |
Medium EPSS 4.77% |
>= 1.3.0, < 1.3.6>= 1.4.0, < 1.4.4 | 1.3.61.4.4 |
| GHSA-x64m-686f-fmm3 XML External Entity (XXE) in Django |
Medium EPSS 4.51% |
>= 1.3.0, < 1.3.6>= 1.4.0, < 1.4.4 | 1.3.61.4.4 |
| GHSA-x64m-686f-fmm3 XML External Entity (XXE) in Django |
Medium EPSS 4.51% |
>= 1.3.0, < 1.3.6 | 1.3.6 |
| GHSA-x64m-686f-fmm3 XML External Entity (XXE) in Django |
Medium EPSS 4.51% |
>= 1.4.0, < 1.4.4 | 1.4.4 |
| GHSA-mwv2-398h-v489 Django Improper Access Control |
Medium EPSS 1.31% |
>= 0.95, < 1.0 | 1.0 |
| GHSA-qc99-g3wm-hgxr Django Arbitrary Code Execution |
High EPSS 1.72% |
>= 0.95, < 1.0 | 1.0 |
| GHSA-qc99-g3wm-hgxr Django Arbitrary Code Execution |
High EPSS 1.72% |
>= 0.95, < 1.0 | 1.0 |
| GHSA-mwv2-398h-v489 Django Improper Access Control |
Medium EPSS 1.31% |
>= 0.95, < 1.0 | 1.0 |
| GHSA-w24h-v9qh-8gxj SQL Injection in Django |
Critical EPSS 2.94% |
>= 4.0, < 4.0.4>= 3.2, < 3.2.13>= 2.2, < 2.2.28 | 2.2.283.2.134.0.4 |
| GHSA-2gwj-7jmv-h26r SQL Injection in Django |
Critical EPSS 18.66% |
>= 4.0, < 4.0.4>= 3.2, < 3.2.13>= 2.2, < 2.2.28 | 2.2.283.2.134.0.4 |
| GHSA-2gwj-7jmv-h26r SQL Injection in Django |
Critical EPSS 18.66% |
>= 2.2, < 2.2.28 | 2.2.28 |
| GHSA-2gwj-7jmv-h26r SQL Injection in Django |
Critical EPSS 18.66% |
>= 3.2, < 3.2.13 | 3.2.13 |
| GHSA-2gwj-7jmv-h26r SQL Injection in Django |
Critical EPSS 18.66% |
>= 4.0, < 4.0.4 | 4.0.4 |
| GHSA-w24h-v9qh-8gxj SQL Injection in Django |
Critical EPSS 2.94% |
>= 2.2, < 2.2.28 | 2.2.28 |
| GHSA-w24h-v9qh-8gxj SQL Injection in Django |
Critical EPSS 2.94% |
>= 3.2, < 3.2.13 | 3.2.13 |
| GHSA-w24h-v9qh-8gxj SQL Injection in Django |
Critical EPSS 2.94% |
>= 4.0, < 4.0.4 | 4.0.4 |
| GHSA-6cw3-g6wv-c2xv Infinite Loop in Django |
High EPSS 49.53% |
>= 2.2, < 2.2.27 | 2.2.27 |
| GHSA-6cw3-g6wv-c2xv Infinite Loop in Django |
High EPSS 49.53% |
>= 4.0, < 4.0.2 | 4.0.2 |
| GHSA-95rw-fx8r-36v6 Cross-site Scripting in Django |
Medium EPSS 3.36% |
>= 3.2, < 3.2.12 | 3.2.12 |
| GHSA-95rw-fx8r-36v6 Cross-site Scripting in Django |
Medium EPSS 3.36% |
>= 2.2, < 2.2.27 | 2.2.27 |
| GHSA-6cw3-g6wv-c2xv Infinite Loop in Django |
High EPSS 49.53% |
>= 3.2, < 3.2.12 | 3.2.12 |
| GHSA-95rw-fx8r-36v6 Cross-site Scripting in Django |
Medium EPSS 3.36% |
>= 2.2, < 2.2.27>= 3.2, < 3.2.12>= 4.0, < 4.0.2 | 2.2.273.2.124.0.2 |
| GHSA-95rw-fx8r-36v6 Cross-site Scripting in Django |
Medium EPSS 3.36% |
>= 4.0, < 4.0.2 | 4.0.2 |
| GHSA-6cw3-g6wv-c2xv Infinite Loop in Django |
High EPSS 49.53% |
>= 2.2, < 2.2.27>= 3.2, < 3.2.12>= 4.0, < 4.0.2 | 2.2.273.2.124.0.2 |
| GHSA-53qw-q765-4fww Denial-of-service in Django |
High EPSS 2.60% |
>= 2.2, < 2.2.26>= 3.2, < 3.2.11>= 4.0, < 4.0.1 | 2.2.263.2.114.0.1 |
| GHSA-53qw-q765-4fww Denial-of-service in Django |
High EPSS 2.60% |
>= 4.0a1, < 4.0.1 | 4.0.1 |
| GHSA-53qw-q765-4fww Denial-of-service in Django |
High EPSS 2.60% |
>= 3.2a1, < 3.2.11 | 3.2.11 |
| GHSA-53qw-q765-4fww Denial-of-service in Django |
High EPSS 2.60% |
>= 2.2a1, < 2.2.26 | 2.2.26 |
| GHSA-8c5j-9r9f-c6w8 Information disclosure in Django |
High EPSS 1.98% |
>= 2.2, < 2.2.26>= 3.2, < 3.2.11>= 4.0, < 4.0.1 | 2.2.263.2.114.0.1 |
| GHSA-8c5j-9r9f-c6w8 Information disclosure in Django |
High EPSS 1.98% |
>= 4.0, < 4.0.1 | 4.0.1 |
| GHSA-8c5j-9r9f-c6w8 Information disclosure in Django |
High EPSS 1.98% |
>= 3.2, < 3.2.11 | 3.2.11 |
| GHSA-8c5j-9r9f-c6w8 Information disclosure in Django |
High EPSS 1.98% |
>= 2.2, < 2.2.26 | 2.2.26 |
| GHSA-jrh2-hc4r-7jwx Directory-traversal in Django |
Medium EPSS 2.59% |
>= 2.2, < 2.2.26>= 3.2, < 3.2.11>= 4.0, < 4.0.1 | 2.2.263.2.114.0.1 |
| GHSA-jrh2-hc4r-7jwx Directory-traversal in Django |
Medium EPSS 2.59% |
>= 4.0, < 4.0.1 | 4.0.1 |
| GHSA-jrh2-hc4r-7jwx Directory-traversal in Django |
Medium EPSS 2.59% |
>= 3.2, < 3.2.11 | 3.2.11 |
| GHSA-jrh2-hc4r-7jwx Directory-traversal in Django |
Medium EPSS 2.59% |
>= 2.2, < 2.2.26 | 2.2.26 |
| GHSA-v6rh-hp5x-86rv Potential bypass of an upstream access control based on URL paths in Django |
High EPSS 2.42% |
>= 2.2, < 2.2.25>= 3.1, < 3.1.14>= 3.2, < 3.2.10 | 2.2.253.1.143.2.10 |
| GHSA-v6rh-hp5x-86rv Potential bypass of an upstream access control based on URL paths in Django |
High EPSS 2.42% |
>= 2.2a1, < 2.2.25 | 2.2.25 |
| GHSA-v6rh-hp5x-86rv Potential bypass of an upstream access control based on URL paths in Django |
High EPSS 2.42% |
>= 3.0a1, < 3.1.14 | 3.1.14 |
| GHSA-v6rh-hp5x-86rv Potential bypass of an upstream access control based on URL paths in Django |
High EPSS 2.42% |
>= 3.2a1, < 3.2.10 | 3.2.10 |
| GHSA-xpfp-f569-q3p2 SQL Injection in Django |
Critical EPSS 44.37% |
>= 3.1, < 3.1.13>= 3.2, < 3.2.5 | 3.1.133.2.5 |
| GHSA-xpfp-f569-q3p2 SQL Injection in Django |
Critical EPSS 44.37% |
>= 3.2a1, < 3.2.5 | 3.2.5 |
| GHSA-xpfp-f569-q3p2 SQL Injection in Django |
Critical EPSS 44.37% |
>= 3.0a1, < 3.1.13 | 3.1.13 |
| GHSA-p99v-5w3c-jqq9 Django Access Control Bypass possibly leading to SSRF, RFI, and LFI attacks |
High EPSS 5.26% |
>= 2.2a1, < 2.2.24 | 2.2.24 |
| GHSA-68w8-qjq3-2gfm Path Traversal in Django |
Medium EPSS 2.74% |
>= 3.0, < 3.1.12 | 3.1.12 |
| GHSA-p99v-5w3c-jqq9 Django Access Control Bypass possibly leading to SSRF, RFI, and LFI attacks |
High EPSS 5.26% |
>= 3.0a1, < 3.1.12 | 3.1.12 |
| GHSA-p99v-5w3c-jqq9 Django Access Control Bypass possibly leading to SSRF, RFI, and LFI attacks |
High EPSS 5.26% |
>= 3.2a1, < 3.2.4 | 3.2.4 |
| GHSA-p99v-5w3c-jqq9 Django Access Control Bypass possibly leading to SSRF, RFI, and LFI attacks |
High EPSS 5.26% |
>= 2.2, < 2.2.24>= 3.0, < 3.1.12>= 3.2, < 3.2.4 | 2.2.243.1.123.2.4 |
| GHSA-68w8-qjq3-2gfm Path Traversal in Django |
Medium EPSS 2.74% |
< 2.2.24 | 2.2.24 |
| GHSA-68w8-qjq3-2gfm Path Traversal in Django |
Medium EPSS 2.74% |
< 2.2.24>= 3.0, < 3.1.12>= 3.2, < 3.2.4 | 2.2.243.1.123.2.4 |
| GHSA-68w8-qjq3-2gfm Path Traversal in Django |
Medium EPSS 2.74% |
>= 3.2, < 3.2.4 | 3.2.4 |
| GHSA-qm57-vhq3-3fwf Header injection possible in Django |
Medium EPSS 3.17% |
>= 3.2, < 3.2.2 | 3.2.2 |
| GHSA-qm57-vhq3-3fwf Header injection possible in Django |
Medium EPSS 3.17% |
>= 2.2, < 2.2.22 | 2.2.22 |
| GHSA-qm57-vhq3-3fwf Header injection possible in Django |
Medium EPSS 3.17% |
>= 3.1, < 3.1.10 | 3.1.10 |
| GHSA-qm57-vhq3-3fwf Header injection possible in Django |
Medium EPSS 3.17% |
>= 2.2, < 2.2.22>= 3.1, < 3.1.10>= 3.2, < 3.2.2 | 2.2.223.1.103.2.2 |
| GHSA-rxjp-mfm9-w4wr Path Traversal in Django |
High EPSS 5.33% |
>= 3.2, < 3.2.1 | 3.2.1 |
| GHSA-rxjp-mfm9-w4wr Path Traversal in Django |
High EPSS 5.33% |
>= 2.2, < 2.2.21 | 2.2.21 |
| GHSA-rxjp-mfm9-w4wr Path Traversal in Django |
High EPSS 5.33% |
>= 2.2, < 2.2.21>= 3.1, < 3.1.9>= 3.2, < 3.2.1 | 2.2.213.1.93.2.1 |
| GHSA-rxjp-mfm9-w4wr Path Traversal in Django |
High EPSS 5.33% |
>= 3.0, < 3.1.9 | 3.1.9 |
| GHSA-xgxc-v2qg-chmh Directory Traversal in Django |
Medium EPSS 3.76% |
>= 2.2, < 2.2.20>= 3.0, < 3.0.14>= 3.1, < 3.1.8 | 2.2.203.0.143.1.8 |
| GHSA-xgxc-v2qg-chmh Directory Traversal in Django |
Medium EPSS 3.76% |
>= 3.0a1, < 3.0.14 | 3.0.14 |
| GHSA-xgxc-v2qg-chmh Directory Traversal in Django |
Medium EPSS 3.76% |
>= 2.2a1, < 2.2.20 | 2.2.20 |
| GHSA-xgxc-v2qg-chmh Directory Traversal in Django |
Medium EPSS 3.76% |
>= 3.1a1, < 3.1.8 | 3.1.8 |
| GHSA-fvgf-6h6h-3322 Django Directory Traversal via archive.extract |
Medium EPSS 7.61% |
>= 3.0, < 3.0.12 | 3.0.12 |
| GHSA-fvgf-6h6h-3322 Django Directory Traversal via archive.extract |
Medium EPSS 7.61% |
>= 2.2, < 2.2.18>= 3.0, < 3.0.12>= 3.1, < 3.1.6 | 2.2.183.0.123.1.6 |
| GHSA-fvgf-6h6h-3322 Django Directory Traversal via archive.extract |
Medium EPSS 7.61% |
>= 3.1, < 3.1.6 | 3.1.6 |
| GHSA-fvgf-6h6h-3322 Django Directory Traversal via archive.extract |
Medium EPSS 7.61% |
>= 2.2, < 2.2.18 | 2.2.18 |
| GHSA-fr28-569j-53c4 Django Incorrect Default Permissions |
High EPSS 3.30% |
>= 2.2, < 2.2.16>= 3.0, < 3.0.10>= 3.1, < 3.1.1 | 2.2.163.0.103.1.1 |
| GHSA-m6gj-h9gm-gw44 Django Incorrect Default Permissions |
High EPSS 3.97% |
>= 2.2a1, < 2.2.16 | 2.2.16 |
| GHSA-m6gj-h9gm-gw44 Django Incorrect Default Permissions |
High EPSS 3.97% |
>= 3.1a1, < 3.1.1 | 3.1.1 |
| GHSA-fr28-569j-53c4 Django Incorrect Default Permissions |
High EPSS 3.30% |
>= 3.0, < 3.0.10 | 3.0.10 |
| GHSA-m6gj-h9gm-gw44 Django Incorrect Default Permissions |
High EPSS 3.97% |
>= 2.2, < 2.2.16>= 3.0, < 3.0.10>= 3.1, < 3.1.1 | 2.2.163.0.103.1.1 |
| GHSA-m6gj-h9gm-gw44 Django Incorrect Default Permissions |
High EPSS 3.97% |
>= 3.0a1, < 3.0.10 | 3.0.10 |
| GHSA-fr28-569j-53c4 Django Incorrect Default Permissions |
High EPSS 3.30% |
>= 2.2, < 2.2.16 | 2.2.16 |
| GHSA-fr28-569j-53c4 Django Incorrect Default Permissions |
High EPSS 3.30% |
>= 3.1, < 3.1.1 | 3.1.1 |
| GHSA-wpjr-j57x-wxfw Data leakage via cache key collision in Django |
Medium EPSS 6.09% |
>= 2.2, < 2.2.13>= 3.0, < 3.0.7 | 2.2.133.0.7 |
| GHSA-wpjr-j57x-wxfw Data leakage via cache key collision in Django |
Medium EPSS 6.09% |
>= 3.0, < 3.0.7 | 3.0.7 |
| GHSA-wpjr-j57x-wxfw Data leakage via cache key collision in Django |
Medium EPSS 6.09% |
>= 2.2, < 2.2.13 | 2.2.13 |
| GHSA-2m34-jcjv-45xf XSS in Django |
Medium EPSS 2.90% |
>= 2.2a1, < 2.2.13 | 2.2.13 |
| GHSA-2m34-jcjv-45xf XSS in Django |
Medium EPSS 2.90% |
>= 3.0a1, < 3.0.7 | 3.0.7 |
| GHSA-2m34-jcjv-45xf XSS in Django |
Medium EPSS 2.90% |
>= 2.2, < 2.2.13>= 3.0, < 3.0.7 | 2.2.133.0.7 |
| GHSA-3gh2-xw74-jmcw SQL injection in Django |
High EPSS 22.51% |
>= 1.11, < 1.11.29 | 1.11.29 |
| GHSA-3gh2-xw74-jmcw SQL injection in Django |
High EPSS 22.51% |
>= 1.11, < 1.11.29>= 2.2, < 2.2.11>= 3.0, < 3.0.4 | 1.11.292.2.113.0.4 |
| GHSA-3gh2-xw74-jmcw SQL injection in Django |
High EPSS 22.51% |
>= 1.11, < 1.11.29>= 2.2, < 2.2.11>= 3.0, < 3.0.4 | 1.11.292.2.113.0.4 |
| GHSA-3gh2-xw74-jmcw SQL injection in Django |
High EPSS 22.51% |
>= 3.0, < 3.0.4 | 3.0.4 |
| GHSA-3gh2-xw74-jmcw SQL injection in Django |
High EPSS 22.51% |
>= 2.2, < 2.2.11 | 2.2.11 |
| GHSA-hmr4-m2h5-33qx SQL injection in Django |
Critical EPSS 65.58% |
>= 1.11, < 1.11.28>= 2.2, < 2.2.10>= 3.0, < 3.0.3 | 1.11.282.2.103.0.3 |
| GHSA-hmr4-m2h5-33qx SQL injection in Django |
Critical EPSS 65.58% |
< 1.11.28 | 1.11.28 |
| GHSA-hmr4-m2h5-33qx SQL injection in Django |
Critical EPSS 65.58% |
>= 2.0, < 2.2.10 | 2.2.10 |
| GHSA-hmr4-m2h5-33qx SQL injection in Django |
Critical EPSS 65.58% |
>= 3.0, < 3.0.3 | 3.0.3 |
| GHSA-vfq6-hq5r-27r6 Django Potential account hijack via password reset form |
Critical EPSS 53.56% |
< 1.11.27 | 1.11.27 |
| PYSEC-2019-86 Django before 1.11.27, 2.x before 2.2.9, and 3.x before 3.0.1 allows account takeover. Withdrawn |
Not rated yet | < 1.11.27>= 2.2, < 2.2.9 | 1.11.272.2.9 |
| GHSA-vfq6-hq5r-27r6 Django Potential account hijack via password reset form |
Critical EPSS 53.56% |
< 1.11.27>= 2.2, < 2.2.9 | 1.11.272.2.9 |
| GHSA-vfq6-hq5r-27r6 Django Potential account hijack via password reset form |
Critical EPSS 53.56% |
>= 3.0, < 3.0.1 | 3.0.1 |
| GHSA-vfq6-hq5r-27r6 Django Potential account hijack via password reset form |
Critical EPSS 53.56% |
>= 2.0, < 2.2.9 | 2.2.9 |
| GHSA-hvmf-r92r-27hr Django allows unintended model editing |
Medium EPSS 1.67% |
>= 2.1, < 2.1.15>= 2.2, < 2.2.8 | 2.1.152.2.8 |
| GHSA-hvmf-r92r-27hr Django allows unintended model editing |
Medium EPSS 1.67% |
>= 2.1, < 2.1.15 | 2.1.15 |
| PYSEC-2019-85 Django 2.1 before 2.1.15 and 2.2 before 2.2.8 allows unintended model editing. Withdrawn |
Not rated yet | >= 2.1, < 2.1.15>= 2.2, < 2.2.8 | 2.1.152.2.8 |
| GHSA-hvmf-r92r-27hr Django allows unintended model editing |
Medium EPSS 1.67% |
>= 2.2, < 2.2.8 | 2.2.8 |
| GHSA-6r97-cj55-9hrq SQL Injection in Django |
Critical EPSS 47.69% |
>= 2.1, < 2.1.11>= 1.11, < 1.11.23>= 2.2, < 2.2.4 | 1.11.232.1.112.2.4 |
| PYSEC-2019-83 An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. Withdrawn |
Not rated yet | >= 2.1, < 2.1.11>= 1.11, < 1.11.23>= 2.2, < 2.2.4 | 1.11.232.1.112.2.4 |
| GHSA-6r97-cj55-9hrq SQL Injection in Django |
Critical EPSS 47.69% |
>= 2.2a1, < 2.2.4 | 2.2.4 |
| GHSA-6r97-cj55-9hrq SQL Injection in Django |
Critical EPSS 47.69% |
>= 2.1a1, < 2.1.11 | 2.1.11 |
| GHSA-6r97-cj55-9hrq SQL Injection in Django |
Critical EPSS 47.69% |
>= 1.11a1, < 1.11.23 | 1.11.23 |
| GHSA-h5jv-4p7w-64jg Django Denial-of-service in strip_tags() |
High EPSS 3.17% |
>= 1.11a1, < 1.11.23 | 1.11.23 |
| GHSA-h5jv-4p7w-64jg Django Denial-of-service in strip_tags() |
High EPSS 3.17% |
>= 2.1a1, < 2.1.11 | 2.1.11 |
| GHSA-h5jv-4p7w-64jg Django Denial-of-service in strip_tags() |
High EPSS 3.17% |
>= 2.2a1, < 2.2.4 | 2.2.4 |
| GHSA-h5jv-4p7w-64jg Django Denial-of-service in strip_tags() |
High EPSS 3.17% |
>= 2.1, < 2.1.11>= 2.2, < 2.2.4>= 1.11, < 1.11.23 | 1.11.232.1.112.2.4 |
| PYSEC-2019-82 An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. Withdrawn |
Not rated yet | >= 2.1, < 2.1.11>= 2.2, < 2.2.4>= 1.11, < 1.11.23 | 1.11.232.1.112.2.4 |
| GHSA-c4qh-4vgv-qc6g Django Denial-of-service in django.utils.text.Truncator |
High EPSS 3.53% |
>= 1.11, < 1.11.23>= 2.1, < 2.1.11>= 2.2, < 2.2.4 | 1.11.232.1.112.2.4 |
| GHSA-v9qg-3j8p-r63v Uncontrolled Recursion in Django |
High EPSS 3.07% |
>= 2.2, < 2.2.4>= 1.11, < 1.11.23>= 2.1, < 2.1.11 | 1.11.232.1.112.2.4 |
| GHSA-v9qg-3j8p-r63v Uncontrolled Recursion in Django |
High EPSS 3.07% |
>= 2.2a1, < 2.2.4 | 2.2.4 |
| GHSA-c4qh-4vgv-qc6g Django Denial-of-service in django.utils.text.Truncator |
High EPSS 3.53% |
>= 2.2a1, < 2.2.4 | 2.2.4 |
| PYSEC-2019-81 An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. Withdrawn |
Not rated yet | >= 1.11, < 1.11.23>= 2.1, < 2.1.11>= 2.2, < 2.2.4 | 1.11.232.1.112.2.4 |
| PYSEC-2019-84 An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. Withdrawn |
Not rated yet | >= 2.2, < 2.2.4>= 1.11, < 1.11.23>= 2.1, < 2.1.11 | 1.11.232.1.112.2.4 |
| GHSA-c4qh-4vgv-qc6g Django Denial-of-service in django.utils.text.Truncator |
High EPSS 3.53% |
>= 1.11a1, < 1.11.23 | 1.11.23 |
| GHSA-v9qg-3j8p-r63v Uncontrolled Recursion in Django |
High EPSS 3.07% |
>= 1.11a1, < 1.11.23 | 1.11.23 |
| GHSA-v9qg-3j8p-r63v Uncontrolled Recursion in Django |
High EPSS 3.07% |
>= 2.1a1, < 2.1.11 | 2.1.11 |
| GHSA-c4qh-4vgv-qc6g Django Denial-of-service in django.utils.text.Truncator |
High EPSS 3.53% |
>= 2.1a1, < 2.1.11 | 2.1.11 |
| GHSA-6c7v-2f49-8h26 Django Incorrect HTTP detection with reverse-proxy connecting via HTTPS |
Medium EPSS 1.71% |
>= 2.2, < 2.2.3 | 2.2.3 |
| PYSEC-2019-80 An issue was discovered in Django 1.11 before 1.11.22, 2.1 before 2.1.10, and 2.2 before 2.2.3. Withdrawn |
Not rated yet | >= 2.1, < 2.1.10>= 2.2, < 2.2.3>= 1.11, < 1.11.22 | 1.11.222.1.102.2.3 |
| GHSA-6c7v-2f49-8h26 Django Incorrect HTTP detection with reverse-proxy connecting via HTTPS |
Medium EPSS 1.71% |
>= 2.1, < 2.1.10 | 2.1.10 |
| GHSA-6c7v-2f49-8h26 Django Incorrect HTTP detection with reverse-proxy connecting via HTTPS |
Medium EPSS 1.71% |
>= 1.11, < 1.11.22 | 1.11.22 |
| GHSA-6c7v-2f49-8h26 Django Incorrect HTTP detection with reverse-proxy connecting via HTTPS |
Medium EPSS 1.71% |
>= 2.1, < 2.1.10>= 2.2, < 2.2.3>= 1.11, < 1.11.22 | 1.11.222.1.102.2.3 |
| GHSA-7rp2-fm2h-wchj Django Cross-site Scripting in AdminURLFieldWidget |
Medium EPSS 2.40% |
>= 2.1a1, < 2.1.9 | 2.1.9 |
| GHSA-7rp2-fm2h-wchj Django Cross-site Scripting in AdminURLFieldWidget |
Medium EPSS 2.40% |
>= 1.11a1, < 1.11.21 | 1.11.21 |
| PYSEC-2019-9 An issue was discovered in Django 1.11 before 1.11.21, 2.1 before 2.1.9, and 2.2 before 2.2.2. Withdrawn |
Not rated yet | >= 2.1, < 2.1.9>= 1.11, < 1.11.21>= 2.2, < 2.2.2 | 1.11.212.1.92.2.2 |
| GHSA-7rp2-fm2h-wchj Django Cross-site Scripting in AdminURLFieldWidget |
Medium EPSS 2.40% |
>= 2.1, < 2.1.9>= 1.11, < 1.11.21>= 2.2, < 2.2.2 | 1.11.212.1.92.2.2 |
| GHSA-7rp2-fm2h-wchj Django Cross-site Scripting in AdminURLFieldWidget |
Medium EPSS 2.40% |
>= 2.2a1, < 2.2.2 | 2.2.2 |
| DRUPAL-CORE-2019-006 XSS in jQuery as used in Drupal, Backdrop CMS, and other products |
Medium EPSS 86.82% |
>= 2.0a1, < 2.1.9>= 2.2a1, < 2.2.2 | 2.1.92.2.2 |
| DRUPAL-CORE-2019-006 XSS in jQuery as used in Drupal, Backdrop CMS, and other products |
Medium EPSS 86.82% |
>= 2.0a1, < 2.1.9 | 2.1.9 |
| DRUPAL-CORE-2019-006 XSS in jQuery as used in Drupal, Backdrop CMS, and other products |
Medium EPSS 86.82% |
>= 2.2a1, < 2.2.2 | 2.2.2 |
| PYSEC-2019-88 Django 1.11.x before 1.11.19, 2.0.x before 2.0.11, and 2.1.x before 2.1.6 allows Uncontrolled Memory Consumption via a malicious attacker-supplied value to the… Withdrawn |
Not rated yet | >= 1.11, < 1.11.19>= 2.0, < 2.0.12>= 2.1, < 2.1.7 | 1.11.192.0.122.1.7 |
| GHSA-wh4h-v3f2-r2pp Uncontrolled Memory Consumption in Django |
High EPSS 5.06% |
>= 1.11, < 1.11.19 | 1.11.19 |
| GHSA-wh4h-v3f2-r2pp Uncontrolled Memory Consumption in Django |
High EPSS 5.06% |
>= 1.11, < 1.11.19>= 2.0, < 2.0.12>= 2.1, < 2.1.7 | 1.11.192.0.122.1.7 |
| GHSA-wh4h-v3f2-r2pp Uncontrolled Memory Consumption in Django |
High EPSS 5.06% |
>= 2.1, < 2.1.6 | 2.1.6 |
| GHSA-wh4h-v3f2-r2pp Uncontrolled Memory Consumption in Django |
High EPSS 5.06% |
>= 2.0, < 2.0.11 | 2.0.11 |
| GHSA-337x-4q8g-prc5 Improper Input Validation in Django |
Medium EPSS 3.43% |
>= 1.11a1, < 1.11.18 | 1.11.18 |
| PYSEC-2019-87 In Django 1.11.x before 1.11.18, 2.0.x before 2.0.10, and 2.1.x before 2.1.5, an Improper Neutralization of Special Elements in Output Used by a Downstream… Withdrawn |
Not rated yet | >= 1.11, < 1.11.18>= 2.0, < 2.0.10>= 2.1, < 2.1.5 | 1.11.182.0.102.1.5 |
| GHSA-337x-4q8g-prc5 Improper Input Validation in Django |
Medium EPSS 3.43% |
>= 1.11, < 1.11.18>= 2.0, < 2.0.10>= 2.1, < 2.1.5 | 1.11.182.0.102.1.5 |
| GHSA-337x-4q8g-prc5 Improper Input Validation in Django |
Medium EPSS 3.43% |
>= 2.1a1, < 2.1.5 | 2.1.5 |
| GHSA-337x-4q8g-prc5 Improper Input Validation in Django |
Medium EPSS 3.43% |
>= 2.0a1, < 2.0.10 | 2.0.10 |
| GHSA-6mx3-3vqg-hpp2 Django allows unprivileged users to read the password hashes of arbitrary accounts |
Medium EPSS 2.05% |
>= 2.1, < 2.1.2 | 2.1.2 |
| GHSA-6mx3-3vqg-hpp2 Django allows unprivileged users to read the password hashes of arbitrary accounts |
Medium EPSS 2.05% |
>= 2.1, < 2.1.2 | 2.1.2 |
| GHSA-5hg3-6c2f-f3wr Django open redirect |
Medium EPSS 25.49% |
>= 2.0, < 2.0.8 | 2.0.8 |
| GHSA-5hg3-6c2f-f3wr Django open redirect |
Medium EPSS 25.49% |
>= 1.11, < 1.11.15 | 1.11.15 |
| GHSA-5hg3-6c2f-f3wr Django open redirect |
Medium EPSS 25.49% |
>= 2.0, < 2.0.8>= 1.11, < 1.11.15 | 1.11.152.0.8 |
| GHSA-2f9x-5v75-3qv4 Django Denial-of-service possibility in truncatechars_html and truncatewords_html template filters |
Medium EPSS 4.37% |
>= 1.11, < 1.11.11 | 1.11.11 |
| GHSA-r28v-mw67-m5p9 Django denial-of-service possibility in urlize and urlizetrunc template filters |
Medium EPSS 4.55% |
>= 2.0a1, < 2.0.3 | 2.0.3 |
| GHSA-r28v-mw67-m5p9 Django denial-of-service possibility in urlize and urlizetrunc template filters |
Medium EPSS 4.55% |
>= 1.11a1, < 1.11.11 | 1.11.11 |
| GHSA-r28v-mw67-m5p9 Django denial-of-service possibility in urlize and urlizetrunc template filters |
Medium EPSS 4.55% |
>= 1.8a1, < 1.8.19 | 1.8.19 |
| GHSA-r28v-mw67-m5p9 Django denial-of-service possibility in urlize and urlizetrunc template filters |
Medium EPSS 4.55% |
>= 1.8, < 1.8.19>= 1.11, < 1.11.11>= 2.0, < 2.0.3 | 1.8.191.11.112.0.3 |
| GHSA-2f9x-5v75-3qv4 Django Denial-of-service possibility in truncatechars_html and truncatewords_html template filters |
Medium EPSS 4.37% |
>= 1.8, < 1.8.19>= 1.11, < 1.11.11>= 2.0, < 2.0.3 | 1.8.191.11.112.0.3 |
| GHSA-2f9x-5v75-3qv4 Django Denial-of-service possibility in truncatechars_html and truncatewords_html template filters |
Medium EPSS 4.37% |
>= 1.8, < 1.8.19 | 1.8.19 |
| GHSA-2f9x-5v75-3qv4 Django Denial-of-service possibility in truncatechars_html and truncatewords_html template filters |
Medium EPSS 4.37% |
>= 2.0, < 2.0.3 | 2.0.3 |
| GHSA-rf4j-j272-fj86 Django vulnerable to information leakage in AuthenticationForm |
High EPSS 4.84% |
>= 2.0, < 2.0.2 | 2.0.2 |
| GHSA-rf4j-j272-fj86 Django vulnerable to information leakage in AuthenticationForm |
High EPSS 4.84% |
>= 1.11.8, < 1.11.10 | 1.11.10 |
| GHSA-rf4j-j272-fj86 Django vulnerable to information leakage in AuthenticationForm |
High EPSS 4.84% |
>= 2.0a1, < 2.0.2 | 2.0.2 |
| GHSA-9r8w-6x8c-6jr9 Django vulnerable to XSS on 500 pages |
Medium EPSS 23.57% |
>= 1.11a1, < 1.11.5 | 1.11.5 |
| GHSA-9r8w-6x8c-6jr9 Django vulnerable to XSS on 500 pages |
Medium EPSS 23.57% |
>= 1.10a1, < 1.10.8 | 1.10.8 |
| GHSA-9r8w-6x8c-6jr9 Django vulnerable to XSS on 500 pages |
Medium EPSS 23.57% |
>= 1.10, < 1.10.8>= 1.11, < 1.11.5 | 1.10.81.11.5 |
| GHSA-h4hv-m4h4-mhwg Django open redirect |
Medium EPSS 1.85% |
>= 1.8, < 1.8.18 | 1.8.18 |
| GHSA-37hp-765x-j95x Django open redirect and possible XSS attack via user-supplied numeric redirect URLs |
Medium EPSS 2.40% |
>= 1.8a1, < 1.8.18 | 1.8.18 |
| GHSA-37hp-765x-j95x Django open redirect and possible XSS attack via user-supplied numeric redirect URLs |
Medium EPSS 2.40% |
>= 1.10a1, < 1.10.7 | 1.10.7 |
| GHSA-37hp-765x-j95x Django open redirect and possible XSS attack via user-supplied numeric redirect URLs |
Medium EPSS 2.40% |
>= 1.9a1, < 1.9.13 | 1.9.13 |
| GHSA-h4hv-m4h4-mhwg Django open redirect |
Medium EPSS 1.85% |
>= 1.10, < 1.10.7 | 1.10.7 |
| GHSA-h4hv-m4h4-mhwg Django open redirect |
Medium EPSS 1.85% |
>= 1.9, < 1.9.13 | 1.9.13 |
| GHSA-h4hv-m4h4-mhwg Django open redirect |
Medium EPSS 1.85% |
>= 1.10, < 1.10.7>= 1.9, < 1.9.13>= 1.8, < 1.8.18 | 1.8.181.9.131.10.7 |
| GHSA-37hp-765x-j95x Django open redirect and possible XSS attack via user-supplied numeric redirect URLs |
Medium EPSS 2.40% |
>= 1.10, < 1.10.7>= 1.9, < 1.9.13>= 1.8, < 1.8.18 | 1.8.181.9.131.10.7 |
| GHSA-3f2c-jm6v-cr35 Django DNS Rebinding Vulnerability |
High EPSS 6.07% |
>= 1.9a1, < 1.9.11 | 1.9.11 |
| GHSA-3f2c-jm6v-cr35 Django DNS Rebinding Vulnerability |
High EPSS 6.07% |
< 1.8.16>= 1.9, < 1.9.11>= 1.10, < 1.10.3 | 1.8.161.9.111.10.3 |
| GHSA-mv8g-fhh6-6267 Django user with hardcoded password created when running tests on Oracle |
Critical EPSS 5.19% |
>= 1.10a1, < 1.10.3 | 1.10.3 |
| GHSA-mv8g-fhh6-6267 Django user with hardcoded password created when running tests on Oracle |
Critical EPSS 5.19% |
>= 1.9a1, < 1.9.11 | 1.9.11 |
| GHSA-mv8g-fhh6-6267 Django user with hardcoded password created when running tests on Oracle |
Critical EPSS 5.19% |
>= 1.8a1, < 1.8.16 | 1.8.16 |
| GHSA-mv8g-fhh6-6267 Django user with hardcoded password created when running tests on Oracle |
Critical EPSS 5.19% |
>= 1.8, < 1.8.16>= 1.9, < 1.9.11>= 1.10, < 1.10.3 | 1.8.161.9.111.10.3 |
| GHSA-3f2c-jm6v-cr35 Django DNS Rebinding Vulnerability |
High EPSS 6.07% |
>= 1.8a1, < 1.8.16 | 1.8.16 |
| GHSA-3f2c-jm6v-cr35 Django DNS Rebinding Vulnerability |
High EPSS 6.07% |
>= 1.10a1, < 1.10.3 | 1.10.3 |
| GHSA-crhm-qpjc-cm64 Django CSRF Protection Bypass |
High EPSS 5.70% |
< 1.8.15>= 1.9, < 1.9.10 | 1.8.151.9.10 |
| GHSA-crhm-qpjc-cm64 Django CSRF Protection Bypass |
High EPSS 5.70% |
< 1.8.15 | 1.8.15 |
| GHSA-crhm-qpjc-cm64 Django CSRF Protection Bypass |
High EPSS 5.70% |
>= 1.9, < 1.9.10 | 1.9.10 |
| GHSA-c8c8-9472-w52h Django Cross-site scripting Vulnerability |
Medium EPSS 5.58% |
>= 1.9, < 1.9.8 | 1.9.8 |
| GHSA-c8c8-9472-w52h Django Cross-site scripting Vulnerability |
Medium EPSS 5.58% |
< 1.8.14 | 1.8.14 |
| GHSA-c8c8-9472-w52h Django Cross-site scripting Vulnerability |
Medium EPSS 5.58% |
>= 1.10a1, < 1.10rc1 | 1.10rc1 |
| GHSA-c8c8-9472-w52h Django Cross-site scripting Vulnerability |
Medium EPSS 5.58% |
< 1.8.14>= 1.9, < 1.9.8>= 1.10a0, < 1.10rc1 | 1.8.141.9.81.10rc1 |
| GHSA-fp6p-5xvw-m74f Django User Enumeration Vulnerability |
Low EPSS 3.35% |
< 1.8.10 | 1.8.10 |
| GHSA-pw27-w7w4-9qc7 Django XSS Vulnerability |
High EPSS 4.05% |
>= 1.9a1, < 1.9.3 | 1.9.3 |
| GHSA-pw27-w7w4-9qc7 Django XSS Vulnerability |
High EPSS 4.05% |
< 1.8.10 | 1.8.10 |
| GHSA-fp6p-5xvw-m74f Django User Enumeration Vulnerability |
Low EPSS 3.35% |
>= 1.9, < 1.9.3 | 1.9.3 |
| GHSA-fp6p-5xvw-m74f Django User Enumeration Vulnerability |
Low EPSS 3.35% |
< 1.8.10>= 1.9, < 1.9.3 | 1.8.101.9.3 |
| GHSA-pw27-w7w4-9qc7 Django XSS Vulnerability |
High EPSS 4.05% |
< 1.8.10>= 1.9, < 1.9.3 | 1.8.101.9.3 |
| GHSA-46x4-9jmv-jc8p Django Access Restrictions Bypass |
Medium EPSS 1.54% |
>= 1.9, < 1.9.2 | 1.9.2 |
| GHSA-46x4-9jmv-jc8p Django Access Restrictions Bypass |
Medium EPSS 1.54% |
>= 1.9, < 1.9.2 | 1.9.2 |
| GHSA-6wcr-wcqm-3mfh Django settings leak in date template filter |
Low EPSS 4.28% |
< 1.7.11>= 1.8, < 1.8.7>= 1.9a0, < 1.9rc2 | 1.7.111.8.71.9rc2 |
| GHSA-6wcr-wcqm-3mfh Django settings leak in date template filter |
Low EPSS 4.28% |
>= 1.7, < 1.7.11 | 1.7.11 |
| GHSA-6wcr-wcqm-3mfh Django settings leak in date template filter |
Low EPSS 4.28% |
>= 1.8a1, < 1.8.7 | 1.8.7 |
| GHSA-6wcr-wcqm-3mfh Django settings leak in date template filter |
Low EPSS 4.28% |
>= 1.9a1, < 1.9rc2 | 1.9rc2 |
| GHSA-pgxh-wfw4-jx2v Django denial of service via empty session record creation |
High EPSS 5.21% |
>= 1.7, < 1.7.10 | 1.7.10 |
| GHSA-pgxh-wfw4-jx2v Django denial of service via empty session record creation |
High EPSS 5.21% |
>= 1.4, < 1.4.22 | 1.4.22 |
| GHSA-x38m-486c-2wr9 Denial-of-service possibility in logout() view by filling session store |
High EPSS 4.97% |
>= 1.7, < 1.7.10>= 1.4, < 1.4.22 | 1.4.221.7.10 |
| GHSA-x38m-486c-2wr9 Denial-of-service possibility in logout() view by filling session store |
High EPSS 4.97% |
>= 1.4, < 1.4.22 | 1.4.22 |
| GHSA-pgxh-wfw4-jx2v Django denial of service via empty session record creation |
High EPSS 5.21% |
>= 1.8, < 1.8.4>= 1.7, < 1.7.10>= 1.4, < 1.4.22 | 1.4.221.7.101.8.4 |
| GHSA-x38m-486c-2wr9 Denial-of-service possibility in logout() view by filling session store |
High EPSS 4.97% |
>= 1.7, < 1.7.10 | 1.7.10 |
| GHSA-pgxh-wfw4-jx2v Django denial of service via empty session record creation |
High EPSS 5.21% |
>= 1.8, < 1.8.4 | 1.8.4 |
| GHSA-q5qw-4364-5hhm Django Vulnerable to HTTP Response Splitting Attack |
High EPSS 3.17% |
< 1.4.21>= 1.5, < 1.7.9>= 1.8, < 1.8.3 | 1.4.211.7.91.8.3 |
| GHSA-cqf7-ff9h-7967 Django ReDoS in validators.URLValidator |
High EPSS 2.98% |
>= 1.8a1, < 1.8.3 | 1.8.3 |
| GHSA-cqf7-ff9h-7967 Django ReDoS in validators.URLValidator |
High EPSS 2.98% |
>= 1.8, < 1.8.3 | 1.8.3 |
| GHSA-q5qw-4364-5hhm Django Vulnerable to HTTP Response Splitting Attack |
High EPSS 3.17% |
< 1.4.21 | 1.4.21 |
| GHSA-q5qw-4364-5hhm Django Vulnerable to HTTP Response Splitting Attack |
High EPSS 3.17% |
>= 1.5, < 1.7.9 | 1.7.9 |
| GHSA-h582-2pch-3xv3 Django Denial-of-service by filling session store |
High EPSS 7.22% |
< 1.4.21 | 1.4.21 |
| GHSA-h582-2pch-3xv3 Django Denial-of-service by filling session store |
High EPSS 7.22% |
>= 1.5, < 1.7.9 | 1.7.9 |
| GHSA-h582-2pch-3xv3 Django Denial-of-service by filling session store |
High EPSS 7.22% |
>= 1.8, < 1.8.3 | 1.8.3 |
| GHSA-h582-2pch-3xv3 Django Denial-of-service by filling session store |
High EPSS 7.22% |
< 1.4.21>= 1.5, < 1.7.9>= 1.8, < 1.8.3 | 1.4.211.7.91.8.3 |
| GHSA-q5qw-4364-5hhm Django Vulnerable to HTTP Response Splitting Attack |
High EPSS 3.17% |
>= 1.8a1, < 1.8.3 | 1.8.3 |
| GHSA-6wgp-fwfm-mxp3 Django allows user sessions hijacking via an empty string in the session key |
High EPSS 1.75% |
>= 1.8a1, < 1.8.2 | 1.8.2 |
| GHSA-6wgp-fwfm-mxp3 Django allows user sessions hijacking via an empty string in the session key |
High EPSS 1.75% |
>= 1.8, < 1.8.2 | 1.8.2 |
| GHSA-j3j3-jrfh-cm2w Django Denial-of-service possibility with strip_tags |
High EPSS 4.83% |
>= 1.6, < 1.6.11 | 1.6.11 |
| GHSA-j3j3-jrfh-cm2w Django Denial-of-service possibility with strip_tags |
High EPSS 4.83% |
>= 1.7, < 1.7.7 | 1.7.7 |
| GHSA-j3j3-jrfh-cm2w Django Denial-of-service possibility with strip_tags |
High EPSS 4.83% |
>= 1.6, < 1.6.11>= 1.7, < 1.7.7>= 1.8a0, < 1.8c1 | 1.6.111.7.71.8c1 |
| GHSA-j3j3-jrfh-cm2w Django Denial-of-service possibility with strip_tags |
High EPSS 4.83% |
>= 1.8a1, < 1.8c1 | 1.8c1 |
| GHSA-7fq8-4pv5-5w5c Django cross-site scripting (XSS) attack via user-supplied redirect URLs |
Medium EPSS 4.97% |
>= 1.5, < 1.6.11 | 1.6.11 |
| GHSA-7fq8-4pv5-5w5c Django cross-site scripting (XSS) attack via user-supplied redirect URLs |
Medium EPSS 4.97% |
< 1.4.20 | 1.4.20 |
| GHSA-7fq8-4pv5-5w5c Django cross-site scripting (XSS) attack via user-supplied redirect URLs |
Medium EPSS 4.97% |
>= 1.8a1, < 1.8c1 | 1.8c1 |
| GHSA-7fq8-4pv5-5w5c Django cross-site scripting (XSS) attack via user-supplied redirect URLs |
Medium EPSS 4.97% |
>= 1.7, < 1.7.7 | 1.7.7 |
| GHSA-7fq8-4pv5-5w5c Django cross-site scripting (XSS) attack via user-supplied redirect URLs |
Medium EPSS 4.97% |
< 1.4.20>= 1.5, < 1.6.11>= 1.7, < 1.7.7>= 1.8a0, < 1.8c1 | 1.4.201.6.111.7.71.8c1 |
| GHSA-6565-fg86-6jcx Django Cross-site Scripting Vulnerability |
Medium EPSS 2.07% |
< 1.7.6 | 1.7.6 |
| GHSA-6565-fg86-6jcx Django Cross-site Scripting Vulnerability |
Medium EPSS 2.07% |
< 1.7.6>= 1.8a1, < 1.8b2 | 1.7.61.8b2 |
| GHSA-6565-fg86-6jcx Django Cross-site Scripting Vulnerability |
Medium EPSS 2.07% |
>= 1.8a1, < 1.8b2 | 1.8b2 |
| GHSA-jhjg-w2cp-5j44 Django DoS in django.views.static.serve |
High EPSS 4.37% |
< 1.4.18>= 1.5, < 1.6.10>= 1.7, < 1.7.3 | 1.4.181.6.101.7.3 |
| GHSA-6g95-x6cj-mg4v Django database denial-of-service with ModelMultipleChoiceField |
High EPSS 2.71% |
< 1.4.18>= 1.5, < 1.6.10>= 1.7, < 1.7.3 | 1.4.181.6.101.7.3 |
| GHSA-7qfw-j7hp-v45g Django WSGI Header Spoofing Vulnerability |
Medium EPSS 6.97% |
< 1.4.18>= 1.5, < 1.6.10>= 1.7, < 1.7.3 | 1.4.181.6.101.7.3 |
| GHSA-gv98-g628-m9x5 Django Cross-site Scripting Vulnerability |
Medium EPSS 3.05% |
< 1.4.18>= 1.5, < 1.6.10>= 1.7, < 1.7.3 | 1.4.181.6.101.7.3 |
| GHSA-gv98-g628-m9x5 Django Cross-site Scripting Vulnerability |
Medium EPSS 3.05% |
>= 1.7, < 1.7.3 | 1.7.3 |
| GHSA-gv98-g628-m9x5 Django Cross-site Scripting Vulnerability |
Medium EPSS 3.05% |
>= 1.6, < 1.6.10 | 1.6.10 |
| GHSA-gv98-g628-m9x5 Django Cross-site Scripting Vulnerability |
Medium EPSS 3.05% |
< 1.4.18 | 1.4.18 |
| GHSA-6g95-x6cj-mg4v Django database denial-of-service with ModelMultipleChoiceField |
High EPSS 2.71% |
>= 1.6, < 1.6.10 | 1.6.10 |
| GHSA-7qfw-j7hp-v45g Django WSGI Header Spoofing Vulnerability |
Medium EPSS 6.97% |
< 1.4.18 | 1.4.18 |
| GHSA-7qfw-j7hp-v45g Django WSGI Header Spoofing Vulnerability |
Medium EPSS 6.97% |
>= 1.6, < 1.6.10 | 1.6.10 |
| GHSA-7qfw-j7hp-v45g Django WSGI Header Spoofing Vulnerability |
Medium EPSS 6.97% |
>= 1.7, < 1.7.3 | 1.7.3 |
| GHSA-6g95-x6cj-mg4v Django database denial-of-service with ModelMultipleChoiceField |
High EPSS 2.71% |
>= 1.7, < 1.7.3 | 1.7.3 |
| GHSA-jhjg-w2cp-5j44 Django DoS in django.views.static.serve |
High EPSS 4.37% |
< 1.4.18 | 1.4.18 |
| GHSA-jhjg-w2cp-5j44 Django DoS in django.views.static.serve |
High EPSS 4.37% |
>= 1.6, < 1.6.10 | 1.6.10 |
| GHSA-jhjg-w2cp-5j44 Django DoS in django.views.static.serve |
High EPSS 4.37% |
>= 1.7, < 1.7.3 | 1.7.3 |
| GHSA-f7cm-ccfp-3q4r Django Incorrectly Validates URLs |
High EPSS 2.30% |
>= 1.6, < 1.6.6 | 1.6.6 |
| GHSA-f7cm-ccfp-3q4r Django Incorrectly Validates URLs |
High EPSS 2.30% |
>= 1.5, < 1.5.9 | 1.5.9 |
| GHSA-625g-gx8c-xcmg Django Middleware Enables Session Hijacking |
Medium EPSS 1.96% |
>= 1.6, < 1.6.6 | 1.6.6 |
| GHSA-f7cm-ccfp-3q4r Django Incorrectly Validates URLs |
High EPSS 2.30% |
< 1.4.14 | 1.4.14 |
| GHSA-625g-gx8c-xcmg Django Middleware Enables Session Hijacking |
Medium EPSS 1.96% |
>= 1.5, < 1.5.9 | 1.5.9 |
| GHSA-625g-gx8c-xcmg Django Middleware Enables Session Hijacking |
Medium EPSS 1.96% |
< 1.4.14 | 1.4.14 |
| GHSA-625g-gx8c-xcmg Django Middleware Enables Session Hijacking |
Medium EPSS 1.96% |
< 1.4.14>= 1.5, < 1.5.9>= 1.6, < 1.6.6 | 1.4.141.5.91.6.6 |
| GHSA-296w-6qhq-gf92 Django denial of service via file upload naming |
High EPSS 2.47% |
< 1.4.14>= 1.5, < 1.5.9>= 1.6, < 1.6.6 | 1.4.141.5.91.6.6 |
| GHSA-296w-6qhq-gf92 Django denial of service via file upload naming |
High EPSS 2.47% |
>= 1.6, < 1.6.6 | 1.6.6 |
| GHSA-296w-6qhq-gf92 Django denial of service via file upload naming |
High EPSS 2.47% |
>= 1.5, < 1.5.9 | 1.5.9 |
| GHSA-296w-6qhq-gf92 Django denial of service via file upload naming |
High EPSS 2.47% |
< 1.4.14 | 1.4.14 |
| GHSA-rw75-m7gp-92m3 Django data leakage via querystring manipulation in admin |
Medium EPSS 1.98% |
< 1.4.14 | 1.4.14 |
| GHSA-625g-gx8c-xcmg Django Middleware Enables Session Hijacking |
Medium EPSS 1.96% |
>= 1.7a1, < 1.7c3 | 1.7c3 |
| GHSA-rw75-m7gp-92m3 Django data leakage via querystring manipulation in admin |
Medium EPSS 1.98% |
>= 1.5, < 1.5.9 | 1.5.9 |
| GHSA-rw75-m7gp-92m3 Django data leakage via querystring manipulation in admin |
Medium EPSS 1.98% |
>= 1.6, < 1.6.6 | 1.6.6 |
| GHSA-rw75-m7gp-92m3 Django data leakage via querystring manipulation in admin |
Medium EPSS 1.98% |
>= 1.7a1, < 1.7c3 | 1.7c3 |
| GHSA-rw75-m7gp-92m3 Django data leakage via querystring manipulation in admin |
Medium EPSS 1.98% |
< 1.4.14>= 1.5, < 1.5.9>= 1.6, < 1.6.6 | 1.4.141.5.91.6.6 |
| GHSA-f7cm-ccfp-3q4r Django Incorrectly Validates URLs |
High EPSS 2.30% |
< 1.4.14>= 1.5, < 1.5.9>= 1.6, < 1.6.6 | 1.4.141.5.91.6.6 |
| GHSA-vq3h-3q7v-9prw Django Allows Open Redirects |
High EPSS 3.15% |
>= 1.5, < 1.5.8 | 1.5.8 |
| GHSA-q7q2-qf2q-rw3w Django Vulnerable to Cache Poisoning |
High EPSS 2.57% |
>= 1.7a1, < 1.7b4 | 1.7b4 |
| GHSA-q7q2-qf2q-rw3w Django Vulnerable to Cache Poisoning |
High EPSS 2.57% |
>= 1.4, < 1.4.13 | 1.4.13 |
| GHSA-q7q2-qf2q-rw3w Django Vulnerable to Cache Poisoning |
High EPSS 2.57% |
>= 1.5, < 1.5.8 | 1.5.8 |
| GHSA-q7q2-qf2q-rw3w Django Vulnerable to Cache Poisoning |
High EPSS 2.57% |
>= 1.6, < 1.6.5 | 1.6.5 |
| GHSA-q7q2-qf2q-rw3w Django Vulnerable to Cache Poisoning |
High EPSS 2.57% |
>= 1.4, < 1.4.13>= 1.5, < 1.5.8>= 1.6, < 1.6.5>= 1.7a0, < 1.7b4 | 1.4.131.5.81.6.51.7b4 |
| GHSA-vq3h-3q7v-9prw Django Allows Open Redirects |
High EPSS 3.15% |
>= 1.7a1, < 1.7b4 | 1.7b4 |
| GHSA-vq3h-3q7v-9prw Django Allows Open Redirects |
High EPSS 3.15% |
>= 1.4, < 1.4.13>= 1.5, < 1.5.8>= 1.6, < 1.6.5>= 1.7a0, < 1.7b4 | 1.4.131.5.81.6.51.7b4 |
| GHSA-vq3h-3q7v-9prw Django Allows Open Redirects |
High EPSS 3.15% |
>= 1.4, < 1.4.13 | 1.4.13 |
| GHSA-vq3h-3q7v-9prw Django Allows Open Redirects |
High EPSS 3.15% |
>= 1.6, < 1.6.5 | 1.6.5 |
| GHSA-rvq6-mrpv-m6rm Code Injection in Django |
Critical EPSS 5.80% |
< 1.4.11>= 1.5, < 1.5.6>= 1.6, < 1.6.3 | 1.4.111.5.61.6.3 |
| GHSA-89hj-xfx5-7q66 Django Reuses Cached CSRF Token |
High EPSS 1.99% |
< 1.4.11 | 1.4.11 |
| GHSA-89hj-xfx5-7q66 Django Reuses Cached CSRF Token |
High EPSS 1.99% |
>= 1.6, < 1.6.3 | 1.6.3 |
| GHSA-wqjj-hx84-v449 Django Vulnerable to MySQL Injection |
Critical EPSS 4.88% |
< 1.4.11 | 1.4.11 |
| GHSA-89hj-xfx5-7q66 Django Reuses Cached CSRF Token |
High EPSS 1.99% |
< 1.4.11>= 1.5, < 1.5.6>= 1.6, < 1.6.3 | 1.4.111.5.61.6.3 |
| GHSA-89hj-xfx5-7q66 Django Reuses Cached CSRF Token |
High EPSS 1.99% |
>= 1.5, < 1.5.6 | 1.5.6 |
| GHSA-wqjj-hx84-v449 Django Vulnerable to MySQL Injection |
Critical EPSS 4.88% |
< 1.4.11>= 1.5, < 1.5.6>= 1.6, < 1.6.3 | 1.4.111.5.61.6.3 |
| GHSA-wqjj-hx84-v449 Django Vulnerable to MySQL Injection |
Critical EPSS 4.88% |
>= 1.6, < 1.6.3 | 1.6.3 |
| GHSA-rvq6-mrpv-m6rm Code Injection in Django |
Critical EPSS 5.80% |
< 1.4.11 | 1.4.11 |
| GHSA-wqjj-hx84-v449 Django Vulnerable to MySQL Injection |
Critical EPSS 4.88% |
>= 1.5, < 1.5.6 | 1.5.6 |
| GHSA-rvq6-mrpv-m6rm Code Injection in Django |
Critical EPSS 5.80% |
>= 1.5, < 1.5.6 | 1.5.6 |
| GHSA-rvq6-mrpv-m6rm Code Injection in Django |
Critical EPSS 5.80% |
>= 1.6, < 1.6.3 | 1.6.3 |
| GHSA-4894-5vqc-6r2r Django cross-site scripting (XSS) vulnerability in the AdminURLFieldWidget widget |
Medium EPSS 2.90% |
>= 1.5, < 1.5.2 | 1.5.2 |
| GHSA-9cwg-mhxf-hh59 Django cross-site scripting (XSS) vulnerability via is_safe_url function |
Medium EPSS 2.32% |
>= 1.4, < 1.4.6>= 1.5, < 1.5.2 | 1.4.61.5.2 |
| GHSA-9cwg-mhxf-hh59 Django cross-site scripting (XSS) vulnerability via is_safe_url function |
Medium EPSS 2.32% |
>= 1.5, < 1.5.2 | 1.5.2 |
| GHSA-9cwg-mhxf-hh59 Django cross-site scripting (XSS) vulnerability via is_safe_url function |
Medium EPSS 2.32% |
>= 1.4, < 1.4.6 | 1.4.6 |
| GHSA-4894-5vqc-6r2r Django cross-site scripting (XSS) vulnerability in the AdminURLFieldWidget widget |
Medium EPSS 2.90% |
>= 1.5, < 1.5.2 | 1.5.2 |
| GHSA-4c42-4rxm-x6qf Django Denial of Service Vulnerability in the authentication framework |
High EPSS 2.68% |
>= 1.5, < 1.5.4 | 1.5.4 |
| GHSA-4c42-4rxm-x6qf Django Denial of Service Vulnerability in the authentication framework |
High EPSS 2.68% |
>= 1.4, < 1.4.8>= 1.5, < 1.5.4 | 1.4.81.5.4 |
| GHSA-4c42-4rxm-x6qf Django Denial of Service Vulnerability in the authentication framework |
High EPSS 2.68% |
>= 1.4, < 1.4.8 | 1.4.8 |
| GHSA-vjjp-9r83-22rc Django Directory Traversal via ssi template tag |
High EPSS 3.21% |
>= 1.5, < 1.5.3 | 1.5.3 |
| GHSA-vjjp-9r83-22rc Django Directory Traversal via ssi template tag |
High EPSS 3.21% |
>= 1.4, < 1.4.7 | 1.4.7 |
| GHSA-vjjp-9r83-22rc Django Directory Traversal via ssi template tag |
High EPSS 3.21% |
>= 1.4, < 1.4.7>= 1.5, < 1.5.3 | 1.4.71.5.3 |
| GHSA-r7w6-p47g-vj53 Django Data leakage via admin history log |
Medium EPSS 1.82% |
>= 1.3, < 1.3.6 | 1.3.6 |
| GHSA-g8xg-jgj6-49r3 Django is vulnerable to Denial of Service attack in formset |
Medium EPSS 2.60% |
>= 1.4, < 1.4.4 | 1.4.4 |
| GHSA-g8xg-jgj6-49r3 Django is vulnerable to Denial of Service attack in formset |
Medium EPSS 2.60% |
>= 1.3, < 1.3.6>= 1.4, < 1.4.4 | 1.3.61.4.4 |
| GHSA-g8xg-jgj6-49r3 Django is vulnerable to Denial of Service attack in formset |
Medium EPSS 2.60% |
>= 1.3, < 1.3.6 | 1.3.6 |
| GHSA-r7w6-p47g-vj53 Django Data leakage via admin history log |
Medium EPSS 1.82% |
>= 1.3, < 1.3.6>= 1.4, < 1.4.4 | 1.3.61.4.4 |
| GHSA-r7w6-p47g-vj53 Django Data leakage via admin history log |
Medium EPSS 1.82% |
>= 1.4, < 1.4.4 | 1.4.4 |
| GHSA-2655-q453-22f9 Django Allows Arbitrary URL Generation |
High EPSS 3.67% |
>= 1.3, < 1.3.4>= 1.4, < 1.4.2 | 1.3.41.4.2 |
| GHSA-2655-q453-22f9 Django Allows Arbitrary URL Generation |
High EPSS 3.67% |
>= 1.3, < 1.3.4 | 1.3.4 |
| GHSA-2655-q453-22f9 Django Allows Arbitrary URL Generation |
High EPSS 3.67% |
>= 1.4, < 1.4.2 | 1.4.2 |
| GHSA-5h2q-4hrp-v9rr Django vulnerable to Improper Restriction of Operations within the Bounds of a Memory Buffer |
High EPSS 1.79% |
< 1.3.2>= 1.4, < 1.4.1 | 1.3.21.4.1 |
| GHSA-78vx-ggch-wghm Django Allows Redirect via Data URL |
Medium EPSS 2.08% |
< 1.3.2>= 1.4, < 1.4.1 | 1.3.21.4.1 |
| GHSA-59w8-4wm2-4xw8 Django Image Field Vulnerable to Image Decompression Bombs |
High EPSS 2.66% |
>= 1.4, < 1.4.1 | 1.4.1 |
| GHSA-59w8-4wm2-4xw8 Django Image Field Vulnerable to Image Decompression Bombs |
High EPSS 2.66% |
< 1.3.2>= 1.4, < 1.4.1 | 1.3.21.4.1 |
| GHSA-5h2q-4hrp-v9rr Django vulnerable to Improper Restriction of Operations within the Bounds of a Memory Buffer |
High EPSS 1.79% |
>= 1.4, < 1.4.1 | 1.4.1 |
| GHSA-59w8-4wm2-4xw8 Django Image Field Vulnerable to Image Decompression Bombs |
High EPSS 2.66% |
< 1.3.2 | 1.3.2 |
| GHSA-5h2q-4hrp-v9rr Django vulnerable to Improper Restriction of Operations within the Bounds of a Memory Buffer |
High EPSS 1.79% |
< 1.3.2 | 1.3.2 |
| GHSA-78vx-ggch-wghm Django Allows Redirect via Data URL |
Medium EPSS 2.08% |
< 1.3.2 | 1.3.2 |
| GHSA-78vx-ggch-wghm Django Allows Redirect via Data URL |
Medium EPSS 2.08% |
>= 1.4, < 1.4.1 | 1.4.1 |
| GHSA-h95j-h2rv-qrg4 Django Cross-Site Request Forgery vulnerability |
High EPSS 1.09% |
< 1.2.7>= 1.3, < 1.3.1 | 1.2.71.3.1 |
| GHSA-wxg3-mfph-qg9w Django Might Allow CSRF Requests via URL Verification |
High EPSS 2.36% |
>= 1.3, < 1.3.1 | 1.3.1 |
| GHSA-x88j-93vc-wpmp Session manipulation in Django |
Medium EPSS 2.28% |
< 1.2.7 | 1.2.7 |
| GHSA-x88j-93vc-wpmp Session manipulation in Django |
Medium EPSS 2.28% |
>= 1.3, < 1.3.1 | 1.3.1 |
| GHSA-h95j-h2rv-qrg4 Django Cross-Site Request Forgery vulnerability |
High EPSS 1.09% |
<= 1.2.7 | No fix yet |
| GHSA-x88j-93vc-wpmp Session manipulation in Django |
Medium EPSS 2.28% |
< 1.2.7>= 1.3, < 1.3.1 | 1.2.71.3.1 |
| GHSA-rm2j-x595-q9cj Django Vulnerable to Cache Poisoning |
High EPSS 2.32% |
< 1.2.7>= 1.3, < 1.3.1 | 1.2.71.3.1 |
| GHSA-rm2j-x595-q9cj Django Vulnerable to Cache Poisoning |
High EPSS 2.32% |
>= 1.3, < 1.3.1 | 1.3.1 |
| GHSA-rm2j-x595-q9cj Django Vulnerable to Cache Poisoning |
High EPSS 2.32% |
< 1.2.7 | 1.2.7 |
| GHSA-h95j-h2rv-qrg4 Django Cross-Site Request Forgery vulnerability |
High EPSS 1.09% |
>= 1.3, <= 1.3.1 | No fix yet |
| GHSA-3jqw-crqj-w8qw Denial of service in django |
High EPSS 3.02% |
< 1.2.7 | 1.2.7 |
| GHSA-3jqw-crqj-w8qw Denial of service in django |
High EPSS 3.02% |
>= 1.3, < 1.3.1 | 1.3.1 |
| GHSA-3jqw-crqj-w8qw Denial of service in django |
High EPSS 3.02% |
< 1.2.7>= 1.3, < 1.3.1 | 1.2.71.3.1 |
| GHSA-wxg3-mfph-qg9w Django Might Allow CSRF Requests via URL Verification |
High EPSS 2.36% |
< 1.2.7 | 1.2.7 |
| GHSA-wxg3-mfph-qg9w Django Might Allow CSRF Requests via URL Verification |
High EPSS 2.36% |
< 1.2.7>= 1.3, < 1.3.1 | 1.2.71.3.1 |
| GHSA-5j2h-h5hg-3wf8 Cross-site request forgery in Django |
High EPSS 1.60% |
>= 1.2, < 1.2.5 | 1.2.5 |
| GHSA-8m3r-rv5g-fcpq Cross-site scripting in django |
Medium EPSS 2.59% |
>= 1.1, < 1.1.4>= 1.2, < 1.2.5 | 1.1.41.2.5 |
| GHSA-8m3r-rv5g-fcpq Cross-site scripting in django |
Medium EPSS 2.59% |
>= 1.1, < 1.1.4>= 1.2, < 1.2.5 | 1.1.41.2.5 |
| GHSA-7g9h-c88w-r7h2 Directory traversal in Django |
Critical EPSS 2.86% |
>= 1.1, < 1.1.4 | 1.1.4 |
| GHSA-7g9h-c88w-r7h2 Directory traversal in Django |
Critical EPSS 2.86% |
>= 1.1, < 1.1.4>= 1.2, < 1.2.5 | 1.1.41.2.5 |
| GHSA-5j2h-h5hg-3wf8 Cross-site request forgery in Django |
High EPSS 1.60% |
>= 1.1, < 1.1.4 | 1.1.4 |
| GHSA-5j2h-h5hg-3wf8 Cross-site request forgery in Django |
High EPSS 1.60% |
>= 1.1, < 1.1.4>= 1.2, < 1.2.5 | 1.1.41.2.5 |
| GHSA-5j2h-h5hg-3wf8 Cross-site request forgery in Django |
High EPSS 1.60% |
>= 1.1, < 1.1.4>= 1.2, < 1.2.5 | 1.1.41.2.5 |
| GHSA-7g9h-c88w-r7h2 Directory traversal in Django |
Critical EPSS 2.86% |
>= 1.2, < 1.2.5 | 1.2.5 |
| GHSA-8m3r-rv5g-fcpq Cross-site scripting in django |
Medium EPSS 2.59% |
>= 1.2, < 1.2.5 | 1.2.5 |
| GHSA-8m3r-rv5g-fcpq Cross-site scripting in django |
Medium EPSS 2.59% |
>= 1.1, < 1.1.4 | 1.1.4 |
| GHSA-7wph-fc4w-wqp2 Improper date handling in Django |
High EPSS 3.40% |
>= 1.2, < 1.2.4 | 1.2.4 |
| GHSA-fwr5-q9rx-294f Improper query string handling in Django |
Medium EPSS 2.48% |
< 1.1.3 | 1.1.3 |
| GHSA-fwr5-q9rx-294f Improper query string handling in Django |
Medium EPSS 2.48% |
>= 1.2, < 1.2.4 | 1.2.4 |
| GHSA-fwr5-q9rx-294f Improper query string handling in Django |
Medium EPSS 2.48% |
< 1.1.3>= 1.2, < 1.2.4 | 1.1.31.2.4 |
| GHSA-7wph-fc4w-wqp2 Improper date handling in Django |
High EPSS 3.40% |
< 1.1.3>= 1.2, < 1.2.4 | 1.1.31.2.4 |
| GHSA-7wph-fc4w-wqp2 Improper date handling in Django |
High EPSS 3.40% |
< 1.1.3>= 1.2, < 1.2.4 | 1.1.31.2.4 |
| GHSA-7wph-fc4w-wqp2 Improper date handling in Django |
High EPSS 3.40% |
< 1.1.3 | 1.1.3 |
| GHSA-fwr5-q9rx-294f Improper query string handling in Django |
Medium EPSS 2.48% |
< 1.1.3>= 1.2, < 1.2.4 | 1.1.31.2.4 |
| GHSA-fxpg-gg9g-76gj Cross-site scripting in django |
Medium EPSS 1.92% |
>= 1.2, < 1.2.2 | 1.2.2 |
| GHSA-fxpg-gg9g-76gj Cross-site scripting in django |
Medium EPSS 1.92% |
>= 1.2, < 1.2.2 | 1.2.2 |
| GHSA-p6m5-h7pp-v2x5 Django Regex Algorithmic Complexity Causes Denial of Service |
High EPSS 3.72% |
>= 1.1, < 1.1.1 | 1.1.1 |
| GHSA-p6m5-h7pp-v2x5 Django Regex Algorithmic Complexity Causes Denial of Service |
High EPSS 3.72% |
>= 1.0, < 1.0.4>= 1.1, < 1.1.1 | 1.0.41.1.1 |
| GHSA-p6m5-h7pp-v2x5 Django Regex Algorithmic Complexity Causes Denial of Service |
High EPSS 3.72% |
>= 1.0, < 1.0.4 | 1.0.4 |
| GHSA-9xg7-gg9m-rmq9 Django Admin Media Handler Vulnerable to Directory Traversal |
High EPSS 2.28% |
< 1.1 | 1.1 |
| GHSA-9xg7-gg9m-rmq9 Django Admin Media Handler Vulnerable to Directory Traversal |
High EPSS 2.28% |
>= 1.0, < 1.0.3 | 1.0.3 |
| GHSA-9xg7-gg9m-rmq9 Django Admin Media Handler Vulnerable to Directory Traversal |
High EPSS 2.28% |
>= 0.96.0, < 0.96.4 | 0.96.4 |
| GHSA-r5cj-wv24-92p5 Django cross-site request forgery (CSRF) vulnerability |
High EPSS 0.93% |
>= 0.96.0, < 0.96.3 | 0.96.3 |
| GHSA-r5cj-wv24-92p5 Django cross-site request forgery (CSRF) vulnerability |
High EPSS 0.93% |
>= 0.95.0, < 0.95.4 | 0.95.4 |
| GHSA-r5cj-wv24-92p5 Django cross-site request forgery (CSRF) vulnerability |
High EPSS 0.93% |
>= 0.91.0, < 0.91.3 | 0.91.3 |
| GHSA-r5cj-wv24-92p5 Django cross-site request forgery (CSRF) vulnerability |
High EPSS 0.93% |
< 1.1 | 1.1 |
| GHSA-54qj-48vx-cr9f Django Cross-site scripting (XSS) vulnerability |
Medium EPSS 1.32% |
>= 0.91, < 0.91.2 | 0.91.2 |
| GHSA-54qj-48vx-cr9f Django Cross-site scripting (XSS) vulnerability |
Medium EPSS 1.32% |
>= 0.96, < 0.96.2 | 0.96.2 |
| GHSA-54qj-48vx-cr9f Django Cross-site scripting (XSS) vulnerability |
Medium EPSS 1.32% |
< 1.1 | 1.1 |
| GHSA-54qj-48vx-cr9f Django Cross-site scripting (XSS) vulnerability |
Medium EPSS 1.32% |
>= 0.95, < 0.95.3 | 0.95.3 |
| GHSA-9v8h-57gv-qch6 Django vulnerable to Denial of Service via i18n middleware component |
Medium EPSS 1.81% |
>= 0.91.0, < 0.91.1 | 0.91.1 |
| GHSA-9v8h-57gv-qch6 Django vulnerable to Denial of Service via i18n middleware component |
Medium EPSS 1.81% |
>= 0.95, < 0.95.2 | 0.95.2 |
| GHSA-9v8h-57gv-qch6 Django vulnerable to Denial of Service via i18n middleware component |
Medium EPSS 1.81% |
>= 0.96.0, < 0.96.1 | 0.96.1 |
| GHSA-9v8h-57gv-qch6 Django vulnerable to Denial of Service via i18n middleware component |
Medium EPSS 1.81% |
< 1.1 | 1.1 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor