Django vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2016-2513Lowdjango: Django User Enumeration Vulnerability CVE-2015-5144Highdjango: Django Vulnerable to HTTP Response Splitting Attack CVE-2015-5145HighDjango: Django ReDoS in validators.URLValidator CVE-2015-5963MediumDjango: Django denial of service via empty session record creation CVE-2016-9014CriticalDjango: Django DNS Rebinding Vulnerability CVE-2016-9013CriticalDjango: Django user with hardcoded password created when running tests on Oracle CVE-2013-6044MediumDjango: Django cross-site scripting (XSS) vulnerability via is_safe_url function CVE-2016-7401Highdjango: Django CSRF Protection Bypass CVE-2011-4139Highdjango: Django Vulnerable to Cache Poisoning CVE-2011-4138HighDjango: Django Might Allow CSRF Requests via URL Verification CVE-2016-6186Mediumdjango: Django Cross-site scripting Vulnerability CVE-2014-3730HighDjango: Django Allows Open Redirects CVE-2014-0483MediumDjango: Django data leakage via querystring manipulation in admin CVE-2014-0480Highdjango: Django Incorrectly Validates URLs CVE-2014-0482Mediumdjango: Django Middleware Enables Session Hijacking CVE-2015-2316HighDjango: Django Denial-of-service possibility with strip_tags CVE-2015-2317MediumDjango: Django cross-site scripting (XSS) attack via user-supplied redirect URLs CVE-2014-0481Highdjango: Django denial of service via file upload naming CVE-2013-0305MediumDjango: Django Data leakage via admin history log CVE-2013-0306MediumDjango: Django is vulnerable to Denial of Service attack in formset CVE-2009-3695HighDjango: Django Regex Algorithmic Complexity Causes Denial of Service CVE-2009-2659HighDjango: Django Admin Media Handler Vulnerable to Directory Traversal CVE-2008-3909Highdjango: Django cross-site request forgery (CSRF) vulnerability CVE-2008-2302Mediumdjango: Django Cross-site scripting (XSS) vulnerability CVE-2007-5712HighDjango: Django vulnerable to Denial of Service via i18n middleware component

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo