django security advisories | pypi.org

Top 0.1% on pypi.org
Top 0.1% downloads on pypi.org
Top 0.1% dependent packages on pypi.org
Top 0.1% dependent repos on pypi.org
Top 0.1% forks on pypi.org
Top 0.5% docker downloads on pypi.org

pypi.org : django

A high-level Python web framework that encourages rapid development and clean, pragmatic design.

Registry - Source - Homepage - Documentation - JSON - codemeta.json
purl: pkg:pypi/django
Keywords: apps , django , framework , models , orm , python , templates , views , web
License: BSD-3-Clause
Latest release: 8 days ago
First release: over 15 years ago
Dependent packages: 2,455
Dependent repositories: 114,817
Downloads: 32,680,209 last month
Stars: 79,831 on GitHub
Forks: 31,752 on GitHub
Docker dependents: 1,112
Docker downloads: 79,908,769
Total Commits: 31509
Committers: 2959
Average commits per author: 10.649
Development Distribution Score (DDS): 0.893
More commit stats: commits.ecosyste.ms
See more repository details: repos.ecosyste.ms
Funding links: https://www.djangoproject.com/fundraising/, https://github.com/sponsors/django
Last synced: 30 minutes ago

Moderate

GSA_kwCzR0hTQS1ycXcyLWdocTktNDRtN84ABPHw

Django is vulnerable to SQL injection in column aliases
Ecosystems: pypi
Packages: Django
Source: github
Published: 8 days ago

Moderate

GSA_kwCzR0hTQS12cmNyLTloajktamNnNs4ABPHx

Django is vulnerable to DoS via XML serializer text extraction
Ecosystems: pypi
Packages: Django
Source: github
Published: 8 days ago

Critical

GSA_kwCzR0hTQS1mcm12LXByNWYtOW1jcs4ABOOX

Django vulnerable to SQL injection via _connector keyword argument in QuerySet and Q objects.
Ecosystems: pypi
Packages: django
Source: github
Published: about 1 month ago

High

GSA_kwCzR0hTQS1xdzI1LXY2OGMtcWpmM84ABOOa

Django has a denial-of-service vulnerability in HttpResponseRedirect and HttpResponsePermanentRedirect on Windows
Ecosystems: pypi
Packages: django
Source: github
Published: about 1 month ago

Low

GSA_kwCzR0hTQS1xOTV3LWM3cWctaHJmZs4ABM21

Django vulnerable to partial directory traversal via archives
Ecosystems: pypi
Packages: django
Source: github
Published: 2 months ago

High

GSA_kwCzR0hTQS1ocHI5LTNtMmctM2o5cM4ABM20

Django vulnerable to SQL injection in column aliases
Ecosystems: pypi
Packages: django
Source: github
Published: 2 months ago

High

GSA_kwCzR0hTQS02dzJyLXIybTUteHE1d84ABL0E

Django is subject to SQL injection through its column aliases
Ecosystems: pypi
Packages: Django
Source: github
Published: 3 months ago

Moderate

GSA_kwCzR0hTQS03eHI1LTloY3EtY2hmOc4ABIp6

Django Improper Output Neutralization for Logs vulnerability
Ecosystems: pypi
Packages: Django
Source: github
Published: 6 months ago

Moderate

GSA_kwCzR0hTQS04ajI0LWNqcnEtZ3Iybc4ABHoL

Django has a denial-of-service possibility in strip_tags()
Ecosystems: pypi
Packages: Django
Source: github
Published: 7 months ago

Moderate

GSA_kwCzR0hTQS13cWZnLW05NmotODV2bc4ABGVX

Django Potential Denial of Service (DoS) on Windows
Ecosystems: pypi
Packages: Django
Source: github
Published: 8 months ago

Moderate

GSA_kwCzR0hTQS1wM2ZwLTg3NDgtdnFmcc4ABFLi

Django vulnerable to Allocation of Resources Without Limits or Throttling
Ecosystems: pypi
Packages: Django
Source: github
Published: 9 months ago

Moderate

GSA_kwCzR0hTQS1xY2dnLWoyeDgtaDlnOM4ABDXN

Django has a potential denial-of-service vulnerability in IPv6 validation
Ecosystems: pypi
Packages: Django
Source: github
Published: 11 months ago

Moderate

GSA_kwCzR0hTQS04NDk4LTJoNzUtNDcyas4ABCGs

Django denial-of-service in django.utils.html.strip_tags()
Ecosystems: pypi
Packages: Django
Source: github
Published: about 1 year ago

High

GSA_kwCzR0hTQS1tOWc4LWZ4eG0teGc4Ns4ABCGw

Django SQL injection in HasKey(lhs, rhs) on Oracle
Ecosystems: pypi
Packages: Django
Source: github
Published: about 1 year ago

Moderate

GSA_kwCzR0hTQS1ycnFjLWMyangtNmpnds4ABADW

Django allows enumeration of user e-mail addresses
Ecosystems: pypi
Packages: Django
Source: github
Published: about 1 year ago

Moderate

GSA_kwCzR0hTQS01aGdjLTJ2ZnAtbXF2Y84ABADU

Django vulnerable to denial-of-service attack via the urlize() and urlizetrunc() template filters
Ecosystems: pypi
Packages: Django
Source: github
Published: about 1 year ago

Moderate

GSA_kwCzR0hTQS1yODM2LWhoNnYtcmc1Z84AA-cw

Django vulnerable to denial-of-service attack
Ecosystems: pypi
Packages: Django
Source: github
Published: over 1 year ago

Moderate

GSA_kwCzR0hTQS03OTVjLTl4cGMteHc2Z84AA-cz

Django vulnerable to a denial-of-service attack
Ecosystems: pypi
Packages: Django
Source: github
Published: over 1 year ago

Critical

GSA_kwCzR0hTQS1wdjRwLWN3d2ctNHJwaM4AA-c1

Django SQL injection vulnerability
Ecosystems: pypi
Packages: Django
Source: github
Published: over 1 year ago

Moderate

GSA_kwCzR0hTQS1qaDc1LTk5aGgtcXZ4Oc4AA-c0

Django memory consumption vulnerability
Ecosystems: pypi
Packages: Django
Source: github
Published: over 1 year ago

High

GSA_kwCzR0hTQS05am1mLTIzN2ctcWY0Ns4AA9wT

Django Path Traversal vulnerability
Ecosystems: pypi
Packages: Django
Source: github
Published: over 1 year ago

High

GSA_kwCzR0hTQS1xZzJwLTlqd3ItbW1xZs4AA9wQ

Django vulnerable to Denial of Service
Ecosystems: pypi
Packages: Django
Source: github
Published: over 1 year ago

Moderate

GSA_kwCzR0hTQS14N3EyLXdyN2cteHFtZs4AA9wR

Django vulnerable to user enumeration attack
Ecosystems: pypi
Packages: Django
Source: github
Published: over 1 year ago

High

GSA_kwCzR0hTQS1mNmY4LTlteDYtOW14Ms4AA9wW

Django vulnerable to Denial of Service
Ecosystems: pypi
Packages: Django
Source: github
Published: over 1 year ago

Moderate

GSA_kwCzR0hTQS12bThxLW01N2ctcGZmM84AA6CU

Regular expression denial-of-service in Django
Ecosystems: pypi
Packages: django
Source: github
Published: over 1 year ago

High

GSA_kwCzR0hTQS14eGo5LWY2cnYtbTN4NM4AA5IP

Django denial-of-service attack in the intcomma template filter
Ecosystems: pypi
Packages: django
Source: github
Published: almost 2 years ago

High

GSA_kwCzR0hTQS1oOGdjLXBnajItdmptM84AA25m

Django Denial-of-service in django.utils.text.Truncator
Ecosystems: pypi
Packages: Django
Source: github
Published: about 2 years ago

Moderate

GSA_kwCzR0hTQS03aDRwLTI3bWgtaG1yd84AA25h

Django Denial of service vulnerability in django.utils.encoding.uri_to_iri
Ecosystems: pypi
Packages: django
Source: github
Published: about 2 years ago

High

GSA_kwCzR0hTQS1xbWY5LTZqcWYtajhmcc4AA23t

Django potential denial of service vulnerability in UsernameField on Windows
Ecosystems: pypi
Packages: Django
Source: github
Published: about 2 years ago

High

GSA_kwCzR0hTQS1qaDN3LTR2dmYtbWpncs4AA0Lg

Django has regular expression denial of service vulnerability in EmailValidator/URLValidator
Ecosystems: pypi
Packages: Django
Source: github
Published: over 2 years ago

Critical

GSA_kwCzR0hTQS1yM3hjLXByZ3ItbWc5cM4AAzG9

Django bypasses validation when using one form field to upload multiple files
Ecosystems: pypi
Packages: Django
Source: github
Published: over 2 years ago

High

GSA_kwCzR0hTQS0yaHJ3LWh4NjctMzR4Ns4AAxpM

Resource exhaustion in Django
Ecosystems: pypi
Packages: Django
Source: github
Published: almost 3 years ago

High

GSA_kwCzR0hTQS1xMmpmLWg5am0tbTdwNM4AAxVW

Django contains Uncontrolled Resource Consumption via cached header
Ecosystems: pypi
Packages: django
Source: github
Published: almost 3 years ago

High

GSA_kwCzR0hTQS1xcnc1LTVoMjgtNmNtZ84AAvXa

Django denial-of-service vulnerability in internationalized URLs
Ecosystems: pypi
Packages: django
Source: github
Published: about 3 years ago

High

GSA_kwCzR0hTQS04eDk0LWhtamgtOTdocc4AAt78

Django vulnerable to Reflected File Download attack
Ecosystems: pypi
Packages: Django
Source: github
Published: over 3 years ago

Critical

GSA_kwCzR0hTQS1wNjR4LThyeHgtd2Y2cc4AAtF-

Django `Trunc()` and `Extract()` database functions vulnerable to SQL Injection
Ecosystems: pypi
Packages: Django
Source: github
Published: over 3 years ago

Critical

GSA_kwCzR0hTQS03OHZ4LWdnY2gtd2dobc4AAfPg

Django Allows Redirect via Data URL
Ecosystems: pypi
Packages: django
Source: github
Published: over 3 years ago

High

GSA_kwCzR0hTQS01OXc4LTR3bTItNHh3OM4AAfPe

Django Image Field Vulnerable to Image Decompression Bombs
Ecosystems: pypi
Packages: django
Source: github
Published: over 3 years ago

High

GSA_kwCzR0hTQS01aDJxLTRocnAtdjlycs4AAfPc

Django vulnerable to Improper Restriction of Operations within the Bounds of a Memory Buffer
Ecosystems: pypi
Packages: Django
Source: github
Published: over 3 years ago

High

GSA_kwCzR0hTQS0yNjU1LXE0NTMtMjJmOc4AAfNa

Django Allows Arbitrary URL Generation
Ecosystems: pypi
Packages: django
Source: github
Published: over 3 years ago

Moderate

GSA_kwCzR0hTQS1xcmg3LXg2ZnAtYzJtcM4AAfMI

XML Entity Expansion (XEE) in Django
Ecosystems: pypi
Packages: Django
Source: github
Published: over 3 years ago

Moderate

GSA_kwCzR0hTQS14NjRtLTY4NmYtZm1tM84AAfL2

XML External Entity (XXE) in Django
Ecosystems: pypi
Packages: Django
Source: github
Published: over 3 years ago

High

GSA_kwCzR0hTQS12ampwLTlyODMtMjJyY84AAe3i

Django Directory Traversal via ssi template tag
Ecosystems: pypi
Packages: django
Source: github
Published: over 3 years ago

High

GSA_kwCzR0hTQS00YzQyLTRyeG0teDZxZs4AAeye

Django Denial of Service Vulnerability in the authentication framework
Ecosystems: pypi
Packages: Django
Source: github
Published: over 3 years ago

High

GSA_kwCzR0hTQS00Nng0LTlqbXYtamM4cM4AAdCD

Django Access Restrictions Bypass
Ecosystems: pypi
Packages: django
Source: github
Published: over 3 years ago

Moderate

GSA_kwCzR0hTQS02NTY1LWZnODYtNmpjeM4AAc0O

Django Cross-site Scripting Vulnerability
Ecosystems: pypi
Packages: django
Source: github
Published: over 3 years ago

Moderate

GSA_kwCzR0hTQS02d2dwLWZ3Zm0tbXhwM84AAct0

Django allows user sessions hijacking via an empty string in the session key
Ecosystems: pypi
Packages: Django
Source: github
Published: over 3 years ago

Moderate

GSA_kwCzR0hTQS02d2NyLXdjcW0tM21maM4AAcl8

Django settings leak in date template filter
Ecosystems: pypi
Packages: django
Source: github
Published: over 3 years ago

Moderate

GSA_kwCzR0hTQS03cWZ3LWo3aHAtdjQ1Z84AAcfU

Django WSGI Header Spoofing Vulnerability
Ecosystems: pypi
Packages: Django, django
Source: github
Published: over 3 years ago

High

GSA_kwCzR0hTQS1qaGpnLXcyY3AtNWo0NM4AAce9

Django DoS in django.views.static.serve
Ecosystems: pypi
Packages: django
Source: github
Published: over 3 years ago

High

GSA_kwCzR0hTQS02Zzk1LXg2Y2otbWc0ds4AAce7

Django database denial-of-service with ModelMultipleChoiceField
Ecosystems: pypi
Packages: Django
Source: github
Published: over 3 years ago

Moderate

GSA_kwCzR0hTQS1ndjk4LWc2MjgtbTl4Nc4AAce6

Django Cross-site Scripting Vulnerability
Ecosystems: pypi
Packages: Django, django
Source: github
Published: over 3 years ago

Moderate

GSA_kwCzR0hTQS14MzhtLTQ4NmMtMndyOc4AAcXd

Denial-of-service possibility in logout() view by filling session store
Ecosystems: pypi
Packages: Django
Source: github
Published: over 3 years ago

High

GSA_kwCzR0hTQS04OWhqLXhmeDUtN3E2Ns4AAcJo

Django Reuses Cached CSRF Token
Ecosystems: pypi
Packages: django
Source: github
Published: over 3 years ago

High

GSA_kwCzR0hTQS13cWpqLWh4ODQtdjQ0Oc4AAcJQ

Django Vulnerable to MySQL Injection
Ecosystems: pypi
Packages: django
Source: github
Published: over 3 years ago

Critical

GSA_kwCzR0hTQS1ydnE2LW1ycHYtbTZybc4AAcJq

Code Injection in Django
Ecosystems: pypi
Packages: Django
Source: github
Published: over 3 years ago

Critical

GSA_kwCzR0hTQS1xN3EyLXFmMnEtcnczd84AAcJT

Django Vulnerable to Cache Poisoning
Ecosystems: pypi
Packages: Django
Source: github
Published: over 3 years ago

Moderate

GSA_kwCzR0hTQS00ODk0LTV2cWMtNnIycs4AAZ0v

Django cross-site scripting (XSS) vulnerability in the AdminURLFieldWidget widget
Ecosystems: pypi
Packages: django
Source: github
Published: over 3 years ago

Low

GSA_kwCzR0hTQS1mcDZwLTV4dnctbTc0Zs4AAZQc

Django User Enumeration Vulnerability
Ecosystems: pypi
Packages: django
Source: github
Published: over 3 years ago

Moderate

GSA_kwCzR0hTQS1wdzI3LXc3dzQtOXFjN84AAZQd

Django XSS Vulnerability
Ecosystems: pypi
Packages: django
Source: github
Published: over 3 years ago

High

GSA_kwCzR0hTQS1jcWY3LWZmOWgtNzk2N84AAYwU

Django ReDoS in validators.URLValidator
Ecosystems: pypi
Packages: Django
Source: github
Published: over 3 years ago

High

GSA_kwCzR0hTQS1xNXF3LTQzNjQtNWhobc4AAYwZ

Django Vulnerable to HTTP Response Splitting Attack
Ecosystems: pypi
Packages: django
Source: github
Published: over 3 years ago

Moderate

GSA_kwCzR0hTQS1wZ3hoLXdmdzQtangyds4AAYdf

Django denial of service via empty session record creation
Ecosystems: pypi
Packages: Django
Source: github
Published: over 3 years ago

Critical

GSA_kwCzR0hTQS1tdjhnLWZoaDYtNjI2N84AAYRT

Django user with hardcoded password created when running tests on Oracle
Ecosystems: pypi
Packages: Django
Source: github
Published: over 3 years ago

Critical

GSA_kwCzR0hTQS0zZjJjLWptNnYtY3IzNc4AAYRU

Django DNS Rebinding Vulnerability
Ecosystems: pypi
Packages: Django
Source: github
Published: over 3 years ago

Moderate

GSA_kwCzR0hTQS05Y3dnLW1oeGYtaGg1Oc4AAYL4

Django cross-site scripting (XSS) vulnerability via is_safe_url function
Ecosystems: pypi
Packages: Django
Source: github
Published: over 3 years ago

High

GSA_kwCzR0hTQS1jcmhtLXFwamMtY202NM4AAXr9

Django CSRF Protection Bypass
Ecosystems: pypi
Packages: django
Source: github
Published: over 3 years ago

High

GSA_kwCzR0hTQS1ybTJqLXg1OTUtcTljas4AAXiH

Django Vulnerable to Cache Poisoning
Ecosystems: pypi
Packages: django
Source: github
Published: over 3 years ago

High

GSA_kwCzR0hTQS13eGczLW1mcGgtcWc5d84AAXiG

Django Might Allow CSRF Requests via URL Verification
Ecosystems: pypi
Packages: Django
Source: github
Published: over 3 years ago

Moderate

GSA_kwCzR0hTQS1jOGM4LTk0NzItdzUyaM4AAV-L

Django Cross-site scripting Vulnerability
Ecosystems: pypi
Packages: django
Source: github
Published: over 3 years ago

High

GSA_kwCzR0hTQS12cTNoLTNxN3YtOXByd84AAVFj

Django Allows Open Redirects
Ecosystems: pypi
Packages: Django
Source: github
Published: over 3 years ago

Moderate

GSA_kwCzR0hTQS02MjVnLWd4OGMteGNtZ84AAVE-

Django Middleware Enables Session Hijacking
Ecosystems: pypi
Packages: Django, django
Source: github
Published: over 3 years ago

High

GSA_kwCzR0hTQS1mN2NtLWNjZnAtM3E0cs4AAVFA

Django Incorrectly Validates URLs
Ecosystems: pypi
Packages: django
Source: github
Published: over 3 years ago

Moderate

GSA_kwCzR0hTQS1ydzc1LW03Z3AtOTJtM84AAVFB

Django data leakage via querystring manipulation in admin
Ecosystems: pypi
Packages: Django
Source: github
Published: over 3 years ago

High

GSA_kwCzR0hTQS1qM2ozLWpyZmgtY20yd84AAVA_

Django Denial-of-service possibility with strip_tags
Ecosystems: pypi
Packages: Django
Source: github
Published: over 3 years ago

Moderate

GSA_kwCzR0hTQS03ZnE4LTRwdjUtNXc1Y84AAVA8

Django cross-site scripting (XSS) attack via user-supplied redirect URLs
Ecosystems: pypi
Packages: Django
Source: github
Published: over 3 years ago

High

GSA_kwCzR0hTQS0yOTZ3LTZxaHEtZ2Y5Ms4AAU-L

Django denial of service via file upload naming
Ecosystems: pypi
Packages: django
Source: github
Published: over 3 years ago

Moderate

GSA_kwCzR0hTQS1yN3c2LXA0N2ctdmo1M83igQ

Django Data leakage via admin history log
Ecosystems: pypi
Packages: Django
Source: github
Published: over 3 years ago

Moderate

GSA_kwCzR0hTQS1nOHhnLWpnajYtNDlyM83ifg

Django is vulnerable to Denial of Service attack in formset
Ecosystems: pypi
Packages: Django
Source: github
Published: over 3 years ago

High

GSA_kwCzR0hTQS1wNm01LWg3cHAtdjJ4Nc3M8Q

Django Regex Algorithmic Complexity Causes Denial of Service
Ecosystems: pypi
Packages: Django
Source: github
Published: over 3 years ago

High

GSA_kwCzR0hTQS05eGc3LWdnOW0tcm1xOc3JJQ

Django Admin Media Handler Vulnerable to Directory Traversal
Ecosystems: pypi
Packages: Django
Source: github
Published: over 3 years ago

High

GSA_kwCzR0hTQS1yNWNqLXd2MjQtOTJwNc285A

Django cross-site request forgery (CSRF) vulnerability
Ecosystems: pypi
Packages: django
Source: github
Published: over 3 years ago

Moderate

GSA_kwCzR0hTQS01NHFqLTQ4dngtY3I5Zs22-A

Django Cross-site scripting (XSS) vulnerability
Ecosystems: pypi
Packages: django
Source: github
Published: over 3 years ago

High

GSA_kwCzR0hTQS05djhoLTU3Z3YtcWNoNs2qog

Django vulnerable to Denial of Service via i18n middleware component
Ecosystems: pypi
Packages: Django
Source: github
Published: over 3 years ago

Moderate

GSA_kwCzR0hTQS1td3YyLTM5OGgtdjQ4Oc2XIA

Django Improper Access Control
Ecosystems: pypi
Packages: Django
Source: github
Published: over 3 years ago

High

GSA_kwCzR0hTQS1xYzk5LWczd20taGd4cs2XHg

Django Arbitrary Code Execution
Ecosystems: pypi
Packages: Django
Source: github
Published: over 3 years ago

Critical

GSA_kwCzR0hTQS0yZ3dqLTdqbXYtaDI2cs07Ng

SQL Injection in Django
Ecosystems: pypi
Packages: Django
Source: github
Published: over 3 years ago

Critical

GSA_kwCzR0hTQS13MjRoLXY5cWgtOGd4as07NQ

SQL Injection in Django
Ecosystems: pypi
Packages: Django
Source: github
Published: over 3 years ago

Moderate

GSA_kwCzR0hTQS05NXJ3LWZ4OHItMzZ2Ns0opg

Cross-site Scripting in Django
Ecosystems: pypi
Packages: django
Source: github
Published: almost 4 years ago

High

GSA_kwCzR0hTQS02Y3czLWc2d3YtYzJ4ds0okA

Infinite Loop in Django
Ecosystems: pypi
Packages: Django
Source: github
Published: almost 4 years ago

High

GSA_kwCzR0hTQS04YzVqLTlyOWYtYzZ3OM0g8Q

Information disclosure in Django
Ecosystems: pypi
Packages: Django
Source: github
Published: almost 4 years ago

Moderate

GSA_kwCzR0hTQS1qcmgyLWhjNHItN2p3eM0g8w

Directory-traversal in Django
Ecosystems: pypi
Packages: Django
Source: github
Published: almost 4 years ago

High

GSA_kwCzR0hTQS01M3F3LXE3NjUtNGZ3d80g9Q

Denial-of-service in Django
Ecosystems: pypi
Packages: Django
Source: github
Published: almost 4 years ago

Moderate

GSA_kwCzR0hTQS12NnJoLWhwNXgtODZyds0afw

Potential bypass of an upstream access control based on URL paths in Django
Ecosystems: pypi
Packages: Django
Source: github
Published: about 4 years ago

Critical

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXhwZnAtZjU2OS1xM3Ay

SQL Injection in Django
Ecosystems: pypi
Packages: Django
Source: github
Published: about 4 years ago

High

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXA5OXYtNXczYy1qcXE5

Django Access Control Bypass possibly leading to SSRF, RFI, and LFI attacks
Ecosystems: pypi
Packages: Django
Source: github
Published: over 4 years ago

Moderate

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTY4dzgtcWpxMy0yZ2Zt

Path Traversal in Django
Ecosystems: pypi
Packages: django
Source: github
Published: over 4 years ago

Moderate

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXFtNTctdmhxMy0zZndm

Header injection possible in Django
Ecosystems: pypi
Packages: Django
Source: github
Published: over 4 years ago

High

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXJ4anAtbWZtOS13NHdy

Path Traversal in Django
Ecosystems: pypi
Packages: Django
Source: github
Published: over 4 years ago

Moderate

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXhneGMtdjJxZy1jaG1o

Directory Traversal in Django
Ecosystems: pypi
Packages: Django
Source: github
Published: over 4 years ago