Django vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
62 matching records
- Medium4.3An issue was discovered in 5.2 before 5.2.9, 5.1 before 5.1.15, and 4.2 before 4.2.27.Check if you run itEPSS 0.93%Dec 2, 2025
- Critical9.1An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8.Check this weekEPSS 19.26%Nov 5, 2025
- High7.5An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8.Check if you run itEPSS 1.91%Nov 5, 2025
- Medium6.3Python Social Auth is a social authentication/registration mechanism.Check if you run itEPSS 0.54%Oct 9, 2025
- Critical9.8jinjava is a Java-based template engine based on django template syntax, adapted to render jinja templates.Check if you run itEPSS 2.19%Sep 17, 2025
- Medium4.0An issue was discovered in Django 5.2 before 5.2.3, 5.1 before 5.1.11, and 4.2 before 4.2.23.Check if you run itEPSS 0.81%Jun 5, 2025
- Medium5.1django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask(0) in models.py.Check if you run itEPSS 0.21%May 31, 2025
- High8.2Django-Select2 is a Django integration for Select2.Check if you run itEPSS 0.33%May 27, 2025
- Medium6.3A vulnerability classified as problematic was found in calmkart Django-sso-server up to 057247929a94ffc358788a37ab99e391379a4d15.Check if you run itEPSS 0.27%May 18, 2025
- Medium5.3An issue was discovered in Django 4.2 before 4.2.21, 5.1 before 5.1.9, and 5.2 before 5.2.1.Check this weekEPSS 14.31%May 8, 2025
- CriticalDjango-Unicorn Class Pollution Vulnerability, Leading to XSS, DoS and Authentication BypassCheck if you run itEPSS 0.49%Feb 3, 2025
- High8.8Django 1.11 before 1.11.29, 2.2 before 2.2.11, and 3.0 before 3.0.4 allows SQL Injection if untrusted data is used as a tolerance parameter in GIS functions and aggregates on OraclCheck this weekEPSS 22.51%Mar 5, 2020