Known vulnerabilities in Django 4.0.3

Software: Django
Version: 4.0.3
Software CPE: cpe:2.3:a:django_software_foundation:django:*:*:*:*:*:*:*:*
Total vulnerabilities: 30
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Django version 4.0.3 Django 4.0.3 is affected by 30 vulnerabilities: 7 high, 18 medium, 5 low Critical High Medium Low

Vulnerabilities (30)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU125093 - Improper input validation
CVE-2026-3902
CWE-20 Medium
No
No
4.2.30, 5.2.13, 6.0.4 07.04.2026 SB20260407104
SB20260407113
SB20260409114
and 11 more
#VU125094 - Improper Access Control
CVE-2026-4277
CWE-284 Low
No
No
4.2.30, 5.2.13, 6.0.4 07.04.2026 SB20260407104
SB20260407113
SB20260409114
and 12 more
#VU125095 - Improper Access Control
CVE-2026-4292
CWE-284 Low
No
No
4.2.30, 5.2.13, 6.0.4 07.04.2026 SB20260407104
SB20260407113
SB20260409114
and 12 more
#VU125096 - Resource exhaustion
CVE-2026-33033
CWE-400 Medium
No
No
4.2.30, 5.2.13, 6.0.4 07.04.2026 SB20260407104
SB20260407113
SB20260409114
and 12 more
#VU125097 - Improper input validation
CVE-2026-33034
CWE-20 Medium
No
No
4.2.30, 5.2.13, 6.0.4 07.04.2026 SB20260407104
SB20260407113
SB20260409114
and 11 more
#VU123482 - Permissions, Privileges, and Access Controls
CVE-2026-25674
CWE-264 Low
No
No
4.2.29, 5.2.12, 6.0.3 03.03.2026 SB2026030347
SB2026030574
SB2026030672
and 12 more
#VU123481 - Resource Management Errors
CVE-2026-25673
CWE-399 Medium
No
No
4.2.29, 5.2.12, 6.0.3 03.03.2026 SB2026030347
SB2026042114
SB2026060617
#VU122261 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-1312
CWE-89 High
No
No
4.2.28, 5.2.11, 6.0.2 03.02.2026 SB2026020349
SB2026020378
SB2026020686
and 15 more
#VU122260 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-1287
CWE-89 High
No
No
4.2.28, 5.2.11, 6.0.2 03.02.2026 SB2026020349
SB2026020378
SB2026020686
and 14 more
#VU122259 - Resource exhaustion
CVE-2026-1285
CWE-400 Medium
No
No
4.2.28, 5.2.11, 6.0.2 03.02.2026 SB2026020349
SB2026020378
SB2026020686
and 15 more
#VU122258 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-1207
CWE-89 High
No
No
4.2.28, 5.2.11, 6.0.2 03.02.2026 SB2026020349
SB2026020378
SB2026020686
and 15 more
#VU122257 - Resource exhaustion
CVE-2025-14550
CWE-400 Medium
No
No
4.2.28, 5.2.11, 6.0.2 03.02.2026 SB2026020349
SB2026020378
SB2026020686
and 14 more
#VU122256 - Information Exposure Through Timing Discrepancy
CVE-2025-13473
CWE-208 Low
No
No
4.2.28, 5.2.11, 6.0.2 03.02.2026 SB2026020349
SB2026020378
SB2026020686
and 13 more
#VU118131 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-64459
CWE-89 Medium
Public exploit available
No
4.2.26, 5.1.14, 5.2.8 05.11.2025 SB2025110551
SB2025110552
SB2025111466
and 14 more
#VU118130 - Resource exhaustion
CVE-2025-64458
CWE-400 Medium
No
No
4.2.26, 5.1.14, 5.2.8 05.11.2025 SB2025110551
SB2025111466
SB2025111467
and 6 more
#VU108774 - Resource exhaustion
CVE-2025-32873
CWE-400 Medium
No
No
4.2.21, 5.1.9, 5.2.1 07.05.2025 SB2025050779
SB2025050787
SB2025050789
and 14 more
#VU101276 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-53908
CWE-89 High
No
No
4.2.17, 5.0.10, 5.1.4 05.12.2024 SB2024120536
SB2024120537
SB2024120538
and 15 more
#VU101275 - Resource exhaustion
CVE-2024-53907
CWE-400 Medium
No
No
4.2.17, 5.0.10, 5.1.4 05.12.2024 SB2024120536
SB2024120537
SB2024120538
and 18 more
#VU87033 - Inefficient Regular Expression Complexity
CVE-2024-27351
CWE-1333 Medium
No
No
3.2.25, 4.2.11, 5.0.3 04.03.2024 SB2024030431
SB2024030441
SB2024030442
and 21 more
#VU86190 - Resource exhaustion
CVE-2024-24680
CWE-400 Medium
No
No
3.2.24, 4.2.10, 5.0.2 06.02.2024 SB2024020643
SB2024020644
SB2024021223
and 17 more


Showing elements 1 - 20 out of 30