django vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2025-13372MediumDjango: Django is vulnerable to SQL injection in column aliases CVE-2025-64458Highdjango: Django has a denial-of-service vulnerability in HttpResponseRedirect and HttpResponsePermanentRedirect on Windows CVE-2025-64459Criticaldjango: Django vulnerable to SQL injection via _connector keyword argument in QuerySet and Q objects.CVE-2025-59682Lowdjango: Django vulnerable to partial directory traversal via archives CVE-2025-59681Highdjango: Django vulnerable to SQL injection in column aliases CVE-2025-57833HighDjango: Django is subject to SQL injection through its column aliases CVE-2025-48432MediumDjango: Django Improper Output Neutralization for Logs vulnerability CVE-2025-32873MediumDjango: Django has a denial-of-service possibility in strip_tags()CVE-2025-27556MediumDjango: Django Potential Denial of Service (DoS) on Windows CVE-2025-26699MediumDjango: Django vulnerable to Allocation of Resources Without Limits or Throttling CVE-2024-56374MediumDjango: Django has a potential denial-of-service vulnerability in IPv6 validation CVE-2024-53908HighDjango: Django SQL injection in HasKey(lhs, rhs) on Oracle CVE-2024-53907MediumDjango: Django denial-of-service in django.utils.html.strip_tags()CVE-2024-45231MediumDjango: Django allows enumeration of user e-mail addresses CVE-2024-45230MediumDjango: Django vulnerable to denial-of-service attack via the urlize() and urlizetrunc() template filters CVE-2024-42005CriticalDjango: Django SQL injection vulnerability CVE-2024-41989MediumDjango: Django memory consumption vulnerability CVE-2024-41990MediumDjango: Django vulnerable to a denial-of-service attack CVE-2024-41991MediumDjango: Django vulnerable to denial-of-service attack CVE-2024-39614HighDjango: Django vulnerable to Denial of Service CVE-2024-39330HighDjango: Django Path Traversal vulnerability CVE-2024-39329MediumDjango: Django vulnerable to user enumeration attack CVE-2024-38875HighDjango: Django vulnerable to Denial of Service CVE-2024-27351Mediumdjango: Regular expression denial-of-service in Django CVE-2024-24680Highdjango: Django denial-of-service attack in the intcomma template filter

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo