Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
MAL-2026-3413
  • PyPI/django-b64-img
Malicious code in django-b64-img (PyPI) 10 May
  • No fix available
GHSA-67qg-7284-2277
  • PyPI/django-s3file
django-s3file is vulnerable to relative path traversal 05 May
  • Fix available
  • Severity - 9.9 (Critical)
GHSA-5hrc-gvxj-w55p
  • PyPI/django
Django Uses Cache Containing Sensitive Information 05 May
  • Fix available
  • Severity - 2.3 (Low)
GHSA-w26r-rmm8-9c29
  • PyPI/django
Django has an Improper Handling of Length Parameter Inconsistency 05 May
  • Fix available
  • Severity - 6.3 (Medium)
GHSA-7h2m-m8vj-598h
  • PyPI/django
Django Uses Persistent Cookies Containing Sensitive Information 05 May
  • Fix available
  • Severity - 2.3 (Low)
PYSEC-2026-55
  • PyPI/django
See record for full details 05 May
  • Fix available
  • Severity - 5.3 (Medium)
PYSEC-2026-54
  • PyPI/django
See record for full details 05 May
  • Fix available
  • Severity - 6.3 (Medium)
PYSEC-2026-50
  • PyPI/django
See record for full details 05 May
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-qp2c-xqv6-phh6
  • PyPI/django-mdeditor
django-mdeditor is Missing Authentication for Critical Function 30 Apr
  • No fix available
  • Severity - 2.0 (Low)
GHSA-mmwr-2jhp-mc7j
  • PyPI/django
Django vulnerable to privilege abuse in ModelAdmin.list_editable 07 Apr
  • Fix available
  • Severity - 2.7 (Low)
GHSA-mvfq-ggxm-9mc5
  • PyPI/django
Django vulnerable to ASGI header spoofing via underscore/hyphen conflation 07 Apr
  • Fix available
  • Severity - 7.5 (High)
GHSA-pwjp-ccjc-ghwg
  • PyPI/django
Django vulnerable to privilege abuse in GenericInlineModelAdmin 07 Apr
  • Fix available
  • Severity - 2.3 (Low)
GHSA-5mf9-h53q-7mhq
  • PyPI/django
Django has potential DoS via MultiPartParser through crafted multipart uploads 07 Apr
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-933h-hp56-hf7m
  • PyPI/django
Django: SGI requests with a missing or understated `Content-Length` header could bypass the `DATA_UPLOAD_MAX_MEMORY_SIZE` limit 07 Apr
  • Fix available
  • Severity - 7.5 (High)
PYSEC-2026-53
  • PyPI/django
See record for full details 07 Apr
  • Fix available
  • Severity - 2.7 (Low)
PYSEC-2026-52
  • PyPI/django
See record for full details 07 Apr
  • Fix available
  • Severity - 9.8 (Critical)