TI-2026-84393 CVE-2026-114582 · GHSA-c37w-4pqp-2hm7
Server-side request forgery in Django via SpatialReference string input
Priority LOW 37
An issue was discovered in Django 6.1 before 6.1.3, 6.0 before 6.0.10, and 5.2 before 5.2.19.
Vulnerabilities
6 records
Advisory: djangoproject Django — Django security releases issued: 6.1.3, 6.0.10, and 5.2.19 Clear all filters
TI-2026-84392 CVE-2026-113733 · GHSA-p5cm-h6hp-4g48
Password hash disclosure to view-only admin users in Django
Priority LOW 11
An issue was discovered in Django 6.1 before 6.1.3 and 6.0 before 6.0.10.
TI-2026-84391 CVE-2026-113593 · GHSA-rpcg-ffqj-qpjw
Potential exposure of private data via empty and missing Vary headers
Priority LOW 12
An issue was discovered in Django 6.1 before 6.1.3, 6.0 before 6.0.10, and 5.2 before 5.2.19.
TI-2026-84390 CVE-2026-111362 · GHSA-gmp6-3w93-2w6x
Server-side request forgery via crs member of GeoJSON geometries
Priority LOW 37
An issue was discovered in Django 6.1 before 6.1.3, 6.0 before 6.0.10, and 5.2 before 5.2.19.
TI-2026-84389 CVE-2026-111211 · GHSA-cc89-hg86-h2hx
Log injection via unescaped geometry form values in Django
Priority LOW 31
An issue was discovered in Django 6.1 before 6.1.3, 6.0 before 6.0.10, and 5.2 before 5.2.19.
TI-2026-84388 CVE-2026-108147 · GHSA-9v48-h9hx-rjpv
Memory exhaustion in Django MultiPartParser via base64 file uploads
Priority LOW 37
An issue was discovered in Django 6.1 before 6.1.3, 6.0.4 before 6.0.10, and 5.2.13 before 5.2.19.