Media
CVE-2026-27982
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 307
Restablecer filtros
Media
ghsa-27jp-wm6q-gp25
sqlparse: formatting list of tuples leads to denial of service
Media
CVE-2026-1312
Django has an SQL Injection issue
Alta
CVE-2026-1287
Django has an SQL Injection issue
Alta
CVE-2026-1207
Django has an SQL Injection issue
Baja
CVE-2026-1285
Django has Inefficient Algorithmic Complexity
Baja
CVE-2025-14550
Django has Inefficient Algorithmic Complexity
Baja
CVE-2025-13473
Django has Observable Timing Discrepancy
Media
CVE-2025-65430
An issue was discovered in allauth-django before 65.13.0. IdP: marking a user as is_active=False after having handed tokens for that user while the account was still active had no effect. Fixed the ac
Media
CVE-2025-65431
An issue was discovered in allauth-django before 65.13.0. Both Okta and NetIQ were using preferred_username as the identifier for third-party provider accounts. That value may be mutable and should th
Media
CVE-2025-64460
Django is vulnerable to DoS via XML serializer text extraction
Media
CVE-2025-13372
Django is vulnerable to SQL injection in column aliases
Crítica
CVE-2025-64459
An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8.
Alta
CVE-2025-64458
Django has a denial-of-service vulnerability in HttpResponseRedirect and HttpResponsePermanentRedirect on Windows
Alta
CVE-2025-59681
Django vulnerable to SQL injection in column aliases
Alta
CVE-2025-57833
Django is subject to SQL injection through its column aliases
Media
CVE-2025-48432
Django Improper Output Neutralization for Logs vulnerability
Media
CVE-2018-25111
django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask(0) in models.py.
Media
CVE-2025-32873
Django has a denial-of-service possibility in strip_tags()
Media
CVE-2025-27556
An issue was discovered in Django 5.1 before 5.1.8 and 5.0 before 5.0.14. The NFKC normalization is slow on Windows. As a consequence, django.contrib.auth.views.LoginView, django.contrib.auth.views.Lo
Baja
ghsa-785h-76cm-cpmf
Django TomSelect incomplete escaping of dangerous characters in widget attributes
Media
CVE-2025-26699
Django vulnerable to Allocation of Resources Without Limits or Throttling
Crítica
CVE-2025-24370
Django-Unicorn Class Pollution Vulnerability, Leading to XSS, DoS and Authentication Bypass
Media
CVE-2024-56374
Django has a potential denial-of-service vulnerability in IPv6 validation
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.