Medium
CVE-2026-68923
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 307
Reset filters
High
CVE-2026-15307
Django GeoDjango spatial lookups allow file writes and outbound requests through GDAL raster parsing
Medium
CVE-2026-15830
Django GeoDjango vulnerable to denial of service through deeply nested geometry collections
Critical
CVE-2026-57147
praisonai-platform: default JWT signing secret 'dev-secret-change-me' enables token forgery
High
CVE-2026-105315
django-haystack: Remote Code Execution via `eval()` in Elasticsearch Result Deserialization
Medium
CVE-2026-48053
Kolibri has Unauthenticated Server-Side Request Forgery (SSRF) in RemoteFacilityUserViewset
Low
CVE-2025-13030
django-mdeditor is Missing Authentication for Critical Function
High
CVE-2026-40474
wger has Broken Access Control in Global Gym Configuration Update Endpoint
Medium
CVE-2026-40353
wger has Stored XSS via Unescaped License Attribution Fields
Medium
CVE-2026-31815
django-unicorn affected by component state manipulation via unvalidated attribute access
High
CVE-2026-25673
Django vulnerable to Uncontrolled Resource Consumption
Low
CVE-2026-25674
Django has a Race Condition vulnerability
High
CVE-2026-24490
MobSF has Stored XSS via Manifest Analysis - Dialer Code Host Field
Medium
CVE-2026-23946
Tendenci Affected by Authenticated Remote Code Execution via Pickle Deserialization
Medium
CVE-2025-61783
Python Social Auth - Django has unsafe account association
Medium
CVE-2025-62607
Nautobot Single Source of Truth (SSoT) has an unauthenticated ServiceNow configuration URL
Low
CVE-2025-59682
Django vulnerable to partial directory traversal via archives
High
CVE-2025-59152
Litestar X-Forwarded-For Header Spoofing Vulnerability Enables Rate Limit Evasion
High
CVE-2025-48383
Django-Select2 Vulnerable to Widget Instance Secret Cache Key Leaking
Medium
CVE-2026-53878
Django: DomainNameValidator permits newline characters that may enable HTTP header injection
Medium
CVE-2026-53877
Django: GDALRaster may over-read heap memory when constructed from bytes
Low
CVE-2026-48588
Django: cache middleware may expose private responses when unrelated request cookies are present
Low
CVE-2025-22151
Strawberry GraphQL has type resolution vulnerability in node interface that allows potential data leakage through incorrect type resolution
Medium
CVE-2024-11406
django CMS Attributes Field Cross-site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.