TI-2025-13292 CVE-2025-14550 · GHSA-33mw-q7rj-mjwj
Potential denial-of-service vulnerability via repeated headers when using ASGI
Priority MEDIUM 41
An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.
Vulnerabilities
6 records
Advisory: djangoproject Django — Django security releases issued: 6.0.2, 5.2.11, and 4.2.28 Clear all filters
TI-2026-01025 CVE-2026-1312 · GHSA-6426-9fv3-65x8
Potential SQL injection via QuerySet.order_by and FilteredRelation
Priority LOW 26
An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.
TI-2026-01003 CVE-2026-1287 · GHSA-gvg8-93h5-g6qq
Potential SQL injection in column aliases via control characters
Priority LOW 26
An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.
TI-2026-01001 CVE-2026-1285 · GHSA-4rrr-2h4v-f3j9
Potential denial-of-service vulnerability in django.utils.text.Truncator HTML methods
Priority MEDIUM 41
An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.
TI-2026-00932 CVE-2026-1207 · GHSA-mwm9-4648-f68q
Potential SQL injection via raster lookups on PostGIS
Priority LOW 39
An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.
TI-2025-12317 CVE-2025-13473 · GHSA-2mcm-79hx-8fxw
Username enumeration through timing difference in mod_wsgi authentication handler
Priority LOW 25
An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.