django vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-53877Mediumdjango: Django: GDALRaster may over-read heap memory when constructed from bytes CVE-2026-53878Mediumdjango: Django: DomainNameValidator permits newline characters that may enable HTTP header injection CVE-2026-48588Lowdjango: Django: cache middleware may expose private responses when unrelated request cookies are present CVE-2026-7666Lowdjango: Django fails to prevent reuse of a partially-initialized connection after a failed `STARTTLS` handshake CVE-2026-6873Lowdjango: Django: signed cookies are vulnerable to salt namespace collisions CVE-2026-8404Lowdjango: Django: UpdateCacheMiddleware may disclose cached responses due to case-sensitive Cache-Control handling CVE-2026-48587Lowdjango: Django: has_vary_header may expose cached responses when Vary values contain whitespace CVE-2026-35193Lowdjango: Django: UpdateCacheMiddleware may disclose private cached responses by omitting Authorization from Vary CVE-2026-5766MediumDjango: Django has an Improper Handling of Length Parameter Inconsistency CVE-2026-6907LowDjango: Django Uses Cache Containing Sensitive Information CVE-2026-35192LowDjango: Django Uses Persistent Cookies Containing Sensitive Information CVE-2026-4277LowDjango: Django vulnerable to privilege abuse in GenericInlineModelAdmin CVE-2026-3902HighDjango: Django vulnerable to ASGI header spoofing via underscore/hyphen conflation CVE-2026-4292LowDjango: Django vulnerable to privilege abuse in ModelAdmin.list_editable CVE-2026-33034HighDjango: Django: SGI requests with a missing or understated `Content-Length` header could bypass the `DATA_UPLOAD_MAX_MEMORY_SIZE` limit CVE-2026-33033MediumDjango: Django has potential DoS via MultiPartParser through crafted multipart uploads CVE-2026-25673HighDjango: Django vulnerable to Uncontrolled Resource Consumption CVE-2026-25674LowDjango: Django has a Race Condition vulnerability CVE-2026-1312MediumDjango: Django has an SQL Injection issue CVE-2026-1287HighDjango: Django has an SQL Injection issue CVE-2026-1207HighDjango: Django has an SQL Injection issue CVE-2026-1285LowDjango: Django has Inefficient Algorithmic Complexity CVE-2025-14550LowDjango: Django has Inefficient Algorithmic Complexity CVE-2025-13473LowDjango: Django has Observable Timing Discrepancy CVE-2025-64460MediumDjango: Django is vulnerable to DoS via XML serializer text extraction

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.