Medium
CVE-2026-28222
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 308
Reset filters
Medium
CVE-2026-27982
An open redirect vulnerability exists in django-allauth versions prior to 65.14.1 when SAML IdP initiated SSO is enabled (it is disabled by default), which may allow an attacker to redirect users to a
Medium
ghsa-27jp-wm6q-gp25
sqlparse: formatting list of tuples leads to denial of service
Medium
CVE-2026-1312
Django has an SQL Injection issue
High
CVE-2026-1287
Django has an SQL Injection issue
High
CVE-2026-1207
Django has an SQL Injection issue
Low
CVE-2026-1285
Django has Inefficient Algorithmic Complexity
Low
CVE-2025-14550
Django has Inefficient Algorithmic Complexity
Low
CVE-2025-13473
Django has Observable Timing Discrepancy
Medium
CVE-2025-65430
An issue was discovered in allauth-django before 65.13.0. IdP: marking a user as is_active=False after having handed tokens for that user while the account was still active had no effect. Fixed the ac
Medium
CVE-2025-65431
An issue was discovered in allauth-django before 65.13.0. Both Okta and NetIQ were using preferred_username as the identifier for third-party provider accounts. That value may be mutable and should th
Medium
CVE-2025-64460
Django is vulnerable to DoS via XML serializer text extraction
Medium
CVE-2025-13372
Django is vulnerable to SQL injection in column aliases
Critical
CVE-2025-64459
An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8.
High
CVE-2025-64458
Django has a denial-of-service vulnerability in HttpResponseRedirect and HttpResponsePermanentRedirect on Windows
High
CVE-2025-59681
Django vulnerable to SQL injection in column aliases
High
CVE-2025-57833
Django is subject to SQL injection through its column aliases
Medium
CVE-2025-48432
Django Improper Output Neutralization for Logs vulnerability
Medium
CVE-2018-25111
django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask(0) in models.py.
Medium
CVE-2025-32873
Django has a denial-of-service possibility in strip_tags()
Medium
CVE-2025-27556
An issue was discovered in Django 5.1 before 5.1.8 and 5.0 before 5.0.14. The NFKC normalization is slow on Windows. As a consequence, django.contrib.auth.views.LoginView, django.contrib.auth.views.Lo
Low
ghsa-785h-76cm-cpmf
Django TomSelect incomplete escaping of dangerous characters in widget attributes
Medium
CVE-2025-26699
Django vulnerable to Allocation of Resources Without Limits or Throttling
Critical
CVE-2025-24370
Django-Unicorn Class Pollution Vulnerability, Leading to XSS, DoS and Authentication Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.