Known vulnerabilities in Django 4.0.3 - page 2

Software: Django
Version: 4.0.3
Software CPE: cpe:2.3:a:django_software_foundation:django:*:*:*:*:*:*:*:*
Total vulnerabilities: 30
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Django version 4.0.3 Django 4.0.3 is affected by 30 vulnerabilities: 7 high, 18 medium, 5 low Critical High Medium Low

Vulnerabilities (30)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82638 - Resource exhaustion
CVE-2023-46695
CWE-400 Medium
No
No
3.2.23, 4.1.13, 4.2.7 01.11.2023 SB2023110106
SB2024013141
SB2023111749
and 1 more
#VU81657 - Resource exhaustion
CVE-2023-43665
CWE-400 Medium
No
No
3.2.22, 4.1.12, 4.2.6 05.10.2023 SB2023100544
SB2023100545
SB2023100546
and 16 more
#VU77880 - Inefficient Regular Expression Complexity
CVE-2023-36053
CWE-1333 Medium
No
No
3.2.20, 4.1.10, 4.2.3 03.07.2023 SB2023070325
SB2023070532
SB2023071502
and 16 more
#VU72330 - Resource exhaustion
CVE-2023-24580
CWE-400 Medium
No
No
3.2.18, 4.0.10, 4.1.7 16.02.2023 SB2023021645
SB2023021648
SB2023031032
and 15 more
#VU71737 - Improper input validation
CVE-2023-23969
CWE-20 Medium
No
No
3.2.17, 4.0.9, 4.1.6 01.02.2023 SB2023020139
SB2023020143
SB2023020151
and 13 more
#VU67893 - Improper input validation
CVE-2022-41323
CWE-20 Medium
No
No
3.2.16, 4.0.8, 4.1.2 04.10.2022 SB2022100415
SB2022100429
SB2022101602
and 9 more
#VU66019 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2022-36359
CWE-451 Low
No
No
3.2.15, 4.0.7 03.08.2022 SB2022080309
SB2022080435
SB2022101602
and 4 more
#VU64905 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-34265
CWE-89 High
Public exploit available
No
3.2.14, 4.0.6 04.07.2022 SB2022070425
SB2022070438
SB2022080147
and 8 more
#VU62051 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-28347
CWE-89 High
No
No
2.2.28, 3.2.13, 4.0.4 11.04.2022 SB2022041110
SB2022041125
SB2022041267
and 8 more
#VU62050 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-28346
CWE-89 High
Public exploit available
No
2.2.28, 3.2.13, 4.0.4 11.04.2022 SB2022041110
SB2022041125
SB2022041126
and 14 more


Showing elements 21 - 40 out of 30