TI-2026-68441 CVE-2026-87975 · GHSA-x869-hccf-fv7r
Authorization bypass in Django model formsets lets users delete rows
Priority LOW 23
An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9, and 5.2 before 5.2.18.
Vulnerabilities
4 records
Advisory: djangoproject Django — Django security releases issued: 6.1.2, 6.0.9, and 5.2.18 Clear all filters
TI-2026-68440 CVE-2026-87890 · GHSA-7cqx-w4gp-37v7
Server-side request forgery in Django spatial lookup bytes values
Priority LOW 36
An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9, and 5.2 before 5.2.18.
TI-2026-68438 CVE-2026-84429 · GHSA-76g2-x83x-73r7
Quadratic parsing in Django HTTP headers allows denial of service
Priority LOW 37
An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9, and 5.2 before 5.2.18.
TI-2026-68435 CVE-2026-77050 · GHSA-mxcg-2f2x-4q92
Memory exhaustion in Django get_supported_language_variant()
Priority LOW 37
An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9, and 5.2 before 5.2.18.