django vulnerabilities (PyPI)
162 vulnerabilities.
djangoPyPIDjango open redirect6.1 MediumdjangoPyPIDjango open redirect and possible XSS attack via user-supplied numeric redirect URLs6.1 MediumdjangoPyPIDjango DNS Rebinding Vulnerability8.1 HighdjangoPyPIDjango user with hardcoded password created when running tests on Oracle9.8 CriticaldjangoPyPIDjango CSRF Protection Bypass7.5 HighdjangoPyPIDjango Cross-site scripting Vulnerability6.1 MediumdjangoPyPIDjango User Enumeration Vulnerability3.1 LowdjangoPyPIDjango XSS Vulnerability7.4 HighdjangoPyPIDjango Access Restrictions Bypass5.5 MediumdjangoPyPIDjango settings leak in date template filter5.0 MediumdjangoPyPIDenial-of-service possibility in logout() view by filling session store5.0 MediumdjangoPyPIDjango denial of service via empty session record creation5.0 MediumdjangoPyPIDjango ReDoS in validators.URLValidator7.8 HighdjangoPyPIDjango Vulnerable to HTTP Response Splitting Attack4.3 MediumdjangoPyPIDjango Denial-of-service by filling session store7.8 HighdjangoPyPIDjango allows user sessions hijacking via an empty string in the session key5.0 MediumdjangoPyPIDjango Cross-site Scripting Vulnerability4.3 MediumdjangoPyPIDjango cross-site scripting (XSS) attack via user-supplied redirect URLs4.3 MediumdjangoPyPIDjango Denial-of-service possibility with strip_tags5.0 MediumdjangoPyPIDjango database denial-of-service with ModelMultipleChoiceField5.0 MediumdjangoPyPIDjango DoS in django.views.static.serve5.0 MediumdjangoPyPIDjango Cross-site Scripting Vulnerability4.3 MediumdjangoPyPIDjango WSGI Header Spoofing Vulnerability5.0 MediumdjangoPyPIDjango data leakage via querystring manipulation in admin3.5 LowdjangoPyPIDjango Middleware Enables Session Hijacking6.0 MediumdjangoPyPIDjango denial of service via file upload naming4.3 MediumdjangoPyPIDjango Incorrectly Validates URLs5.8 MediumdjangoPyPIDjango Allows Open Redirects4.3 MediumdjangoPyPIDjango Vulnerable to Cache Poisoning6.4 MediumdjangoPyPIDjango Vulnerable to MySQL Injection10.0 HighdjangoPyPIDjango Reuses Cached CSRF Token5.0 MediumdjangoPyPICode Injection in Django5.1 MediumdjangoPyPIDjango Denial of Service Vulnerability in the authentication framework5.0 MediumdjangoPyPIDjango Directory Traversal via ssi template tag5.0 MediumdjangoPyPIDjango cross-site scripting (XSS) vulnerability via is_safe_url function4.3 MediumdjangoPyPIDjango cross-site scripting (XSS) vulnerability in the AdminURLFieldWidget widget4.3 MediumdjangoPyPIXML Entity Expansion (XEE) in Django5.0 MediumdjangoPyPIXML External Entity (XXE) in Django5.0 MediumdjangoPyPIDjango is vulnerable to Denial of Service attack in formset5.0 MediumdjangoPyPIDjango Data leakage via admin history log4.0 MediumdjangoPyPIDjango Allows Arbitrary URL Generation6.4 MediumdjangoPyPIDjango vulnerable to Improper Restriction of Operations within the Bounds of a Memory Buffer5.0 MediumdjangoPyPIDjango Image Field Vulnerable to Image Decompression Bombs5.0 MediumdjangoPyPIDjango Allows Redirect via Data URL4.3 MediumdjangoPyPIDjango Cross-Site Request Forgery vulnerability6.8 MediumdjangoPyPIDjango Vulnerable to Cache Poisoning5.0 MediumdjangoPyPIDjango Might Allow CSRF Requests via URL Verification5.0 MediumdjangoPyPIDenial of service in django5.0 MediumdjangoPyPISession manipulation in Django5.8 MediumdjangoPyPIDirectory traversal in Django7.5 High- Show moreLoading…