Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 307
Reset filtersCross-site Scripting in wagtail
Django Access Control Bypass possibly leading to SSRF, RFI, and LFI attacks
Path Traversal in Django
Header injection possible in Django
Path Traversal in Django
Potential DoS with NumberFilter conversion to integer values.
SQL Injection via in django-debug-toolbar
Directory Traversal in Django
Potential sensitive information disclosed in error reports
Django Channels leakage of session identifiers using legacy AsgiHandler
Django Directory Traversal via archive.extract
Cross-site Scripting (XSS) in Django REST Framework
Django Incorrect Default Permissions
Django Incorrect Default Permissions
django-celery-results Stores Sensitive Information In Cleartext
Cross-Site Scripting in Wagtail
User passwords are stored in clear text in the Django session
Directory traversal outside of SENDFILE_ROOT in django-sendfile2
Timing attack on django-basic-auth-ip-whitelist
XSS in Django
Data leakage via cache key collision in Django
Potential Observable Timing Discrepancy in Wagtail
Possible XSS attack in Wagtail
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.