djangoproject vulnerabilities

CVEs per yearBy the year they were published

1. 202512
2. 202640

Newest CVEs

• CVE-2026-114582

  Server-side request forgery via SpatialReference string input

  djangoproject · Django

  Medium6.9
• CVE-2026-113733

  Password hash disclosure to "view only" admin users with custom user models

  djangoproject · Django

  Low2.1
• CVE-2026-113593

  Potential exposure of private data via empty and missing Vary headers

  djangoproject · Django

  Low2.3
• CVE-2026-111362

  Server-side request forgery via crs member of GeoJSON geometries

  djangoproject · Django

  Medium6.9
• CVE-2026-111211

  Potential log injection via unescaped geometry form values

  djangoproject · Django

  Medium6.9
• CVE-2026-108147

  Potential memory exhaustion in MultiPartParser via base64-encoded file upload

  djangoproject · Django

  Medium6.9
• CVE-2026-87975

  Privilege abuse in model formsets with editable primary keys

  djangoproject · Django

  Medium5.3
• CVE-2026-87890

  Potential request forgery via spatial lookup byte values

  djangoproject · Django

  Medium6.9
• CVE-2026-84429

  Potential denial-of-service vulnerability in HTTP header parsing

  djangoproject · Django

  Medium6.9
• CVE-2026-77050

  Potential denial-of-service vulnerability in get_supported_language_variant()

  djangoproject · Django

  Medium6.9