Known vulnerabilities in python-django

Vendor: openEuler
Software: python-django
Software CPE: cpe:2.3:o:openeuler:python-django:*:*:*:*:*:openeuler:*:*
Total vulnerabilities: 61
Public exploits: 5
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting python-django python-django is affected by 61 known vulnerabilities: 11 high, 38 medium, 12 low Critical High Medium Low

Vulnerabilities (61)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137028 - Use of Web Browser Cache Containing Sensitive Information
CVE-2026-48588
CWE-525 Medium
No
No
2.2.27-23, 4.2.15-17 07.07.2026 SB2026070771
SB2026071012
SB2026071707
and 6 more
#VU137029 - Out-of-bounds read
CVE-2026-53877
CWE-125 Low
No
No
2.2.27-23, 4.2.15-17 07.07.2026 SB2026070771
SB2026071012
SB2026071707
and 6 more
#VU133399 - Incomplete Comparison with Missing Factors
CVE-2026-48587
CWE-1023 Low
No
No
2.2.27-23, 4.2.15-16 04.06.2026 SB20260604100
SB2026060570
SB2026060571
and 5 more
#VU133391 - Use of Cache Containing Sensitive Information
CVE-2026-35193
CWE-524 Low
No
No
2.2.27-23, 4.2.15-16 04.06.2026 SB20260604100
SB2026060570
SB2026060571
and 5 more
#VU133367 - Improper Handling of Case Sensitivity
CVE-2026-8404
CWE-178 Low
No
No
2.2.27-23, 4.2.15-16 04.06.2026 SB20260604100
SB2026060570
SB2026060571
and 5 more
#VU133364 - Cleartext Transmission of Sensitive Information
CVE-2026-7666
CWE-319 Low
No
No
2.2.27-23, 4.2.15-16 04.06.2026 SB20260604100
SB2026060570
SB2026060571
and 5 more
#VU133360 - Improper Verification of Cryptographic Signature
CVE-2026-6873
CWE-347 Low
No
No
2.2.27-23, 4.2.15-16 04.06.2026 SB20260604100
SB2026060570
SB2026060571
and 5 more
#VU130190 - Improper input validation
CVE-2026-5766
CWE-20 Medium
No
No
2.2.27-23, 4.2.15-15 05.05.2026 SB20260505111
SB2026050601
SB20260507300
and 9 more
#VU130191 - Session Fixation
CVE-2026-35192
CWE-384 Medium
No
No
2.2.27-23, 4.2.15-15 05.05.2026 SB20260505111
SB2026050601
SB20260507300
and 10 more
#VU130192 - Use of Web Browser Cache Containing Sensitive Information
CVE-2026-6907
CWE-525 Medium
No
No
2.2.27-23, 4.2.15-15 05.05.2026 SB20260505111
SB2026050601
SB20260507300
and 9 more
#VU125093 - Improper input validation
CVE-2026-3902
CWE-20 Medium
No
No
4.2.15-15 07.04.2026 SB20260407104
SB20260407113
SB20260409114
and 11 more
#VU125094 - Improper Access Control
CVE-2026-4277
CWE-284 Low
No
No
2.2.27-22, 4.2.15-15 07.04.2026 SB20260407104
SB20260407113
SB20260409114
and 12 more
#VU125095 - Improper Access Control
CVE-2026-4292
CWE-284 Low
No
No
2.2.27-22, 4.2.15-15 07.04.2026 SB20260407104
SB20260407113
SB20260409114
and 12 more
#VU125096 - Resource exhaustion
CVE-2026-33033
CWE-400 Medium
No
No
2.2.27-22, 4.2.15-15 07.04.2026 SB20260407104
SB20260407113
SB20260409114
and 12 more
#VU125097 - Improper input validation
CVE-2026-33034
CWE-20 Medium
No
No
4.2.15-15 07.04.2026 SB20260407104
SB20260407113
SB20260409114
and 11 more
#VU123482 - Permissions, Privileges, and Access Controls
CVE-2026-25674
CWE-264 Low
No
No
2.2.27-22, 4.2.15-13 03.03.2026 SB2026030347
SB2026030574
SB2026030672
and 12 more
#VU122259 - Resource exhaustion
CVE-2026-1285
CWE-400 Medium
No
No
2.2.27-21, 4.2.15-12 03.02.2026 SB2026020349
SB2026020378
SB2026020686
and 15 more
#VU122258 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-1207
CWE-89 High
No
No
2.2.27-21, 4.2.15-12 03.02.2026 SB2026020349
SB2026020378
SB2026020686
and 15 more
#VU122257 - Resource exhaustion
CVE-2025-14550
CWE-400 Medium
No
No
4.2.15-12 03.02.2026 SB2026020349
SB2026020378
SB2026020686
and 14 more
#VU122256 - Information Exposure Through Timing Discrepancy
CVE-2025-13473
CWE-208 Low
No
No
2.2.27-21, 4.2.15-12 03.02.2026 SB2026020349
SB2026020378
SB2026020686
and 13 more


Showing elements 1 - 20 out of 61