Known vulnerabilities in python-django (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:python-django_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 61
Public exploits: 8
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting python-django (Ubuntu package) python-django (Ubuntu package) is affected by 61 known vulnerabilities: 15 high, 39 medium, 7 low Critical High Medium Low

Vulnerabilities (61)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU130190 - Improper input validation
CVE-2026-5766
CWE-20 Medium
No
No
2:3.2.12-2ubuntu1.27, 3:4.2.11-1ubuntu1.16, 3:5.2.4-1ubuntu2.5, 3:5.2.9-0ubuntu4.1 05.05.2026 SB20260505111
SB2026050601
SB20260507300
and 9 more
#VU130191 - Session Fixation
CVE-2026-35192
CWE-384 Medium
No
No
2:3.2.12-2ubuntu1.27, 3:4.2.11-1ubuntu1.16, 3:5.2.4-1ubuntu2.5, 3:5.2.9-0ubuntu4.1 05.05.2026 SB20260505111
SB2026050601
SB20260507300
and 10 more
#VU130192 - Use of Web Browser Cache Containing Sensitive Information
CVE-2026-6907
CWE-525 Medium
No
No
2:3.2.12-2ubuntu1.27, 3:4.2.11-1ubuntu1.16, 3:5.2.4-1ubuntu2.5, 3:5.2.9-0ubuntu4.1 05.05.2026 SB20260505111
SB2026050601
SB20260507300
and 9 more
#VU125093 - Improper input validation
CVE-2026-3902
CWE-20 Medium
No
No
1.6.11-0ubuntu1.3+esm11, 1.8.7-1ubuntu5.15+esm12, 1:1.11.11-1ubuntu1.21+esm15, 2:2.2.12-1ubuntu0.29+esm8, 2:3.2.12-2ubuntu1.26, 3:4.2.11-1ubuntu1.15, 3:5.2.4-1ubuntu2.4 07.04.2026 SB20260407104
SB20260407113
SB20260409114
and 11 more
#VU125094 - Improper Access Control
CVE-2026-4277
CWE-284 Low
No
No
1.6.11-0ubuntu1.3+esm11, 1.8.7-1ubuntu5.15+esm12, 1:1.11.11-1ubuntu1.21+esm15, 2:2.2.12-1ubuntu0.29+esm8, 2:3.2.12-2ubuntu1.26, 3:4.2.11-1ubuntu1.15, 3:5.2.4-1ubuntu2.4 07.04.2026 SB20260407104
SB20260407113
SB20260409114
and 12 more
#VU125095 - Improper Access Control
CVE-2026-4292
CWE-284 Low
No
No
1.6.11-0ubuntu1.3+esm11, 1.8.7-1ubuntu5.15+esm12, 1:1.11.11-1ubuntu1.21+esm15, 2:2.2.12-1ubuntu0.29+esm8, 2:3.2.12-2ubuntu1.26, 3:4.2.11-1ubuntu1.15, 3:5.2.4-1ubuntu2.4 07.04.2026 SB20260407104
SB20260407113
SB20260409114
and 12 more
#VU125096 - Resource exhaustion
CVE-2026-33033
CWE-400 Medium
No
No
1.6.11-0ubuntu1.3+esm11, 1.8.7-1ubuntu5.15+esm12, 1:1.11.11-1ubuntu1.21+esm15, 2:2.2.12-1ubuntu0.29+esm8, 2:3.2.12-2ubuntu1.26, 3:4.2.11-1ubuntu1.15, 3:5.2.4-1ubuntu2.4 07.04.2026 SB20260407104
SB20260407113
SB20260409114
and 12 more
#VU125097 - Improper input validation
CVE-2026-33034
CWE-20 Medium
No
No
1.6.11-0ubuntu1.3+esm11, 1.8.7-1ubuntu5.15+esm12, 1:1.11.11-1ubuntu1.21+esm15, 2:2.2.12-1ubuntu0.29+esm8, 2:3.2.12-2ubuntu1.26, 3:4.2.11-1ubuntu1.15, 3:5.2.4-1ubuntu2.4 07.04.2026 SB20260407104
SB20260407113
SB20260409114
and 11 more
#VU122261 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-1312
CWE-89 High
No
No
1.6.11-0ubuntu1.3+esm10, 1.8.7-1ubuntu5.15+esm11, 1:1.11.11-1ubuntu1.21+esm14, 2:2.2.12-1ubuntu0.29+esm7, 2:3.2.12-2ubuntu1.25, 3:4.2.11-1ubuntu1.14, 3:5.2.4-1ubuntu2.3 03.02.2026 SB2026020349
SB2026020378
SB2026020686
and 15 more
#VU122260 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-1287
CWE-89 High
No
No
1.6.11-0ubuntu1.3+esm10, 1.8.7-1ubuntu5.15+esm11, 1:1.11.11-1ubuntu1.21+esm14, 2:2.2.12-1ubuntu0.29+esm7, 2:3.2.12-2ubuntu1.25, 3:4.2.11-1ubuntu1.14, 3:5.2.4-1ubuntu2.3 03.02.2026 SB2026020349
SB2026020378
SB2026020686
and 14 more
#VU122259 - Resource exhaustion
CVE-2026-1285
CWE-400 Medium
No
No
1.6.11-0ubuntu1.3+esm10, 1.8.7-1ubuntu5.15+esm11, 1:1.11.11-1ubuntu1.21+esm14, 2:2.2.12-1ubuntu0.29+esm7, 2:3.2.12-2ubuntu1.25, 3:4.2.11-1ubuntu1.14, 3:5.2.4-1ubuntu2.3 03.02.2026 SB2026020349
SB2026020378
SB2026020686
and 15 more
#VU122258 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-1207
CWE-89 High
No
No
1.6.11-0ubuntu1.3+esm10, 1.8.7-1ubuntu5.15+esm11, 1:1.11.11-1ubuntu1.21+esm14, 2:2.2.12-1ubuntu0.29+esm7, 2:3.2.12-2ubuntu1.25, 3:4.2.11-1ubuntu1.14, 3:5.2.4-1ubuntu2.3 03.02.2026 SB2026020349
SB2026020378
SB2026020686
and 15 more
#VU122257 - Resource exhaustion
CVE-2025-14550
CWE-400 Medium
No
No
1.6.11-0ubuntu1.3+esm10, 1.8.7-1ubuntu5.15+esm11, 1:1.11.11-1ubuntu1.21+esm14, 2:2.2.12-1ubuntu0.29+esm7, 2:3.2.12-2ubuntu1.25, 3:4.2.11-1ubuntu1.14, 3:5.2.4-1ubuntu2.3 03.02.2026 SB2026020349
SB2026020378
SB2026020686
and 14 more
#VU122256 - Information Exposure Through Timing Discrepancy
CVE-2025-13473
CWE-208 Low
No
No
1.6.11-0ubuntu1.3+esm10, 1.8.7-1ubuntu5.15+esm11, 1:1.11.11-1ubuntu1.21+esm14, 2:2.2.12-1ubuntu0.29+esm7, 2:3.2.12-2ubuntu1.25, 3:4.2.11-1ubuntu1.14, 3:5.2.4-1ubuntu2.3 03.02.2026 SB2026020349
SB2026020378
SB2026020686
and 13 more
#VU119043 - Resource Management Errors
CVE-2025-64460
CWE-399 Medium
No
No
1.6.11-0ubuntu1.3+esm9, 1.8.7-1ubuntu5.15+esm10, 1:1.11.11-1ubuntu1.21+esm13, 2:2.2.12-1ubuntu0.29+esm6, 2:3.2.12-2ubuntu1.24, 3:4.2.11-1ubuntu1.13, 3:4.2.18-1ubuntu1.7, 3:5.2.4-1ubuntu2.2 02.12.2025 SB2025120234
SB2025120237
SB2025120561
and 13 more
#VU119042 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-13372
CWE-89 Medium
No
No
1.6.11-0ubuntu1.3+esm9, 1.8.7-1ubuntu5.15+esm10, 1:1.11.11-1ubuntu1.21+esm13, 2:2.2.12-1ubuntu0.29+esm6, 2:3.2.12-2ubuntu1.24, 3:4.2.11-1ubuntu1.13, 3:4.2.18-1ubuntu1.7, 3:5.2.4-1ubuntu2.2 02.12.2025 SB2025120234
SB2025120237
SB2025121224
and 8 more
#VU118131 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-64459
CWE-89 Medium
Available
No
2:2.2.12-1ubuntu0.29+esm5, 2:3.2.12-2ubuntu1.23, 3:4.2.11-1ubuntu1.12, 3:4.2.18-1ubuntu1.6, 3:5.2.4-1ubuntu2.1 05.11.2025 SB2025110551
SB2025110552
SB2025111466
and 14 more
#VU116427 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-59682
CWE-22 Medium
No
No
1.6.11-0ubuntu1.3+esm8, 1.8.7-1ubuntu5.15+esm9, 1:1.11.11-1ubuntu1.21+esm12, 2:2.2.12-1ubuntu0.29+esm4, 2:3.2.12-2ubuntu1.22, 3:4.2.11-1ubuntu1.11, 3:4.2.18-1ubuntu1.5 03.10.2025 SB2025100337
SB2025100340
SB2025100647
and 14 more
#VU116426 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-59681
CWE-89 High
No
No
1.6.11-0ubuntu1.3+esm8, 1.8.7-1ubuntu5.15+esm9, 1:1.11.11-1ubuntu1.21+esm12, 2:2.2.12-1ubuntu0.29+esm4, 2:3.2.12-2ubuntu1.22, 3:4.2.11-1ubuntu1.11, 3:4.2.18-1ubuntu1.5 03.10.2025 SB2025100337
SB2025100340
SB2025100647
and 12 more
#VU114764 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-57833
CWE-89 High
Available
No
2:2.2.12-1ubuntu0.29+esm3, 2:3.2.12-2ubuntu1.21, 3:4.2.11-1ubuntu1.10, 3:4.2.18-1ubuntu1.4 03.09.2025 SB2025090342
SB2025090433
SB2025090469
and 19 more


Showing elements 1 - 20 out of 61