django vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2015-0220Mediumdjango: Django Cross-site Scripting Vulnerability CVE-2015-5964MediumDjango: Denial-of-service possibility in logout() view by filling session store CVE-2014-0472CriticalDjango: Code Injection in Django CVE-2014-0473Highdjango: Django Reuses Cached CSRF Token CVE-2014-0474Highdjango: Django Vulnerable to MySQL Injection CVE-2014-1418CriticalDjango: Django Vulnerable to Cache Poisoning CVE-2013-4249Mediumdjango: Django cross-site scripting (XSS) vulnerability in the AdminURLFieldWidget widget CVE-2016-2512Mediumdjango: Django XSS Vulnerability CVE-2016-2513Lowdjango: Django User Enumeration Vulnerability CVE-2015-5144Highdjango: Django Vulnerable to HTTP Response Splitting Attack CVE-2015-5145HighDjango: Django ReDoS in validators.URLValidator CVE-2015-5963MediumDjango: Django denial of service via empty session record creation CVE-2016-9014CriticalDjango: Django DNS Rebinding Vulnerability CVE-2016-9013CriticalDjango: Django user with hardcoded password created when running tests on Oracle CVE-2013-6044MediumDjango: Django cross-site scripting (XSS) vulnerability via is_safe_url function CVE-2016-7401Highdjango: Django CSRF Protection Bypass CVE-2011-4139Highdjango: Django Vulnerable to Cache Poisoning CVE-2011-4138HighDjango: Django Might Allow CSRF Requests via URL Verification CVE-2016-6186Mediumdjango: Django Cross-site scripting Vulnerability CVE-2014-3730HighDjango: Django Allows Open Redirects CVE-2014-0483MediumDjango: Django data leakage via querystring manipulation in admin CVE-2014-0480Highdjango: Django Incorrectly Validates URLs CVE-2014-0482Mediumdjango: Django Middleware Enables Session Hijacking CVE-2015-2316HighDjango: Django Denial-of-service possibility with strip_tags CVE-2015-2317MediumDjango: Django cross-site scripting (XSS) attack via user-supplied redirect URLs

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo