Django vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2022-36359HighDjango: Django vulnerable to Reflected File Download attack CVE-2022-34265CriticalDjango: Django `Trunc()` and `Extract()` database functions vulnerable to SQL Injection CVE-2012-3442Criticaldjango: Django Allows Redirect via Data URL CVE-2012-3443Highdjango: Django Image Field Vulnerable to Image Decompression Bombs CVE-2012-3444HighDjango: Django vulnerable to Improper Restriction of Operations within the Bounds of a Memory Buffer CVE-2012-4520Highdjango: Django Allows Arbitrary URL Generation CVE-2013-1664MediumDjango: XML Entity Expansion (XEE) in Django CVE-2013-1665MediumDjango: XML External Entity (XXE) in Django CVE-2013-4315Highdjango: Django Directory Traversal via ssi template tag CVE-2013-1443HighDjango: Django Denial of Service Vulnerability in the authentication framework CVE-2016-2048Highdjango: Django Access Restrictions Bypass CVE-2015-2241Mediumdjango: Django Cross-site Scripting Vulnerability CVE-2015-3982MediumDjango: Django allows user sessions hijacking via an empty string in the session key CVE-2015-8213Mediumdjango: Django settings leak in date template filter CVE-2015-0219Mediumdjango: Django WSGI Header Spoofing Vulnerability CVE-2015-0221Highdjango: Django DoS in django.views.static.serve CVE-2015-0222HighDjango: Django database denial-of-service with ModelMultipleChoiceField CVE-2015-0220Mediumdjango: Django Cross-site Scripting Vulnerability CVE-2015-5964MediumDjango: Denial-of-service possibility in logout() view by filling session store CVE-2014-0472CriticalDjango: Code Injection in Django CVE-2014-0473Highdjango: Django Reuses Cached CSRF Token CVE-2014-0474Highdjango: Django Vulnerable to MySQL Injection CVE-2014-1418CriticalDjango: Django Vulnerable to Cache Poisoning CVE-2013-4249Mediumdjango: Django cross-site scripting (XSS) vulnerability in the AdminURLFieldWidget widget CVE-2016-2512Mediumdjango: Django XSS Vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo