Mittel
CVE-2026-28222
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 308
Filter zurücksetzen
Mittel
CVE-2026-27982
An open redirect vulnerability exists in django-allauth versions prior to 65.14.1 when SAML IdP initiated SSO is enabled (it is disabled by default), which may allow an attacker to redirect users to a
Mittel
ghsa-27jp-wm6q-gp25
sqlparse: formatting list of tuples leads to denial of service
Mittel
CVE-2026-1312
Django has an SQL Injection issue
Hoch
CVE-2026-1287
Django has an SQL Injection issue
Hoch
CVE-2026-1207
Django has an SQL Injection issue
Niedrig
CVE-2026-1285
Django has Inefficient Algorithmic Complexity
Niedrig
CVE-2025-14550
Django has Inefficient Algorithmic Complexity
Niedrig
CVE-2025-13473
Django has Observable Timing Discrepancy
Mittel
CVE-2025-65430
An issue was discovered in allauth-django before 65.13.0. IdP: marking a user as is_active=False after having handed tokens for that user while the account was still active had no effect. Fixed the ac
Mittel
CVE-2025-65431
An issue was discovered in allauth-django before 65.13.0. Both Okta and NetIQ were using preferred_username as the identifier for third-party provider accounts. That value may be mutable and should th
Mittel
CVE-2025-64460
Django is vulnerable to DoS via XML serializer text extraction
Mittel
CVE-2025-13372
Django is vulnerable to SQL injection in column aliases
Kritisch
CVE-2025-64459
An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8.
Hoch
CVE-2025-64458
Django has a denial-of-service vulnerability in HttpResponseRedirect and HttpResponsePermanentRedirect on Windows
Hoch
CVE-2025-59681
Django vulnerable to SQL injection in column aliases
Hoch
CVE-2025-57833
Django is subject to SQL injection through its column aliases
Mittel
CVE-2025-48432
Django Improper Output Neutralization for Logs vulnerability
Mittel
CVE-2018-25111
django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask(0) in models.py.
Mittel
CVE-2025-32873
Django has a denial-of-service possibility in strip_tags()
Mittel
CVE-2025-27556
An issue was discovered in Django 5.1 before 5.1.8 and 5.0 before 5.0.14. The NFKC normalization is slow on Windows. As a consequence, django.contrib.auth.views.LoginView, django.contrib.auth.views.Lo
Niedrig
ghsa-785h-76cm-cpmf
Django TomSelect incomplete escaping of dangerous characters in widget attributes
Mittel
CVE-2025-26699
Django vulnerable to Allocation of Resources Without Limits or Throttling
Kritisch
CVE-2025-24370
Django-Unicorn Class Pollution Vulnerability, Leading to XSS, DoS and Authentication Bypass
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.