TI-2026-35943 CVE-2026-48587 · GHSA-923m-gv2p-w5qp
Potential exposure of private data via whitespace padding in Vary header
Priority LOW 12
An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6.
Vulnerabilities
5 records
Advisory: djangoproject Django — Django security releases issued: 6.0.6 and 5.2.15 Clear all filters
TI-2026-27346 CVE-2026-35193 · GHSA-qpc8-7fxc-cm4p
Potential exposure of private data via missing Vary: Authorization in UpdateCacheMiddleware
Priority LOW 12
An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6.
TI-2026-07386 CVE-2026-8404 · GHSA-8cjm-8mp7-r2xf
Potential exposure of private data via case-sensitive Cache-Control directives in UpdateCacheMiddleware
Priority LOW 12
An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6.
TI-2026-06748 CVE-2026-7666 · GHSA-mm6v-q8q9-pgcf
Potential unencrypted email transmission via STARTTLS in the SMTP backend
Priority LOW 11
An issue was discovered in Django 6.0 before 6.0.6 and 5.2 before 5.2.15.
TI-2026-06029 CVE-2026-6873 · GHSA-h7pc-vwp9-298g
Signed cookie salt namespace collision in django.http.HttpRequest.get_signed_cookie
Priority LOW 12
An issue was discovered in Django 6.0 before 6.0.6 and 5.2 before 5.2.15.