Known vulnerabilities in python-django

Vendor: openEuler
Software: python-django
Software CPE: cpe:2.3:o:openeuler:python-django:*:*:*:*:*:openeuler:*:*
Total vulnerabilities: 65
Public exploits: 5
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting python-django python-django is affected by 65 known vulnerabilities: 11 high, 40 medium, 14 low Critical High Medium Low

Vulnerabilities (65)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140942 - Improper input validation
CVE-2026-15307
CWE-20 Low
No
No
4.2.15-18 05.08.2026 SB2026080503
SB2026080601
SB2026083039
and 6 more
#VU140943 - Resource exhaustion
CVE-2026-15337
CWE-400 Medium
No
No
4.2.15-18 05.08.2026 SB2026080503
SB2026080601
SB2026083039
and 8 more
#VU140944 - Uncontrolled Recursion
CVE-2026-15830
CWE-674 Medium
No
No
4.2.15-18 05.08.2026 SB2026080503
SB2026080601
SB2026083039
and 8 more
#VU140945 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-15920
CWE-79 Low
No
No
4.2.15-18 05.08.2026 SB2026080503
SB2026080601
SB2026083039
and 8 more
#VU137028 - Use of Web Browser Cache Containing Sensitive Information
CVE-2026-48588
CWE-525 Medium
No
No
2.2.27-23, 4.2.15-17 07.07.2026 SB2026070771
SB2026071012
SB2026071707
and 6 more
#VU137029 - Out-of-bounds read
CVE-2026-53877
CWE-125 Low
No
No
2.2.27-23, 4.2.15-17 07.07.2026 SB2026070771
SB2026071012
SB2026071707
and 6 more
#VU133399 - Incomplete Comparison with Missing Factors
CVE-2026-48587
CWE-1023 Low
No
No
2.2.27-23, 4.2.15-16 04.06.2026 SB20260604100
SB2026060570
SB2026060571
and 5 more
#VU133391 - Use of Cache Containing Sensitive Information
CVE-2026-35193
CWE-524 Low
No
No
2.2.27-23, 4.2.15-16 04.06.2026 SB20260604100
SB2026060570
SB2026060571
and 5 more
#VU133367 - Improper Handling of Case Sensitivity
CVE-2026-8404
CWE-178 Low
No
No
2.2.27-23, 4.2.15-16 04.06.2026 SB20260604100
SB2026060570
SB2026060571
and 5 more
#VU133364 - Cleartext Transmission of Sensitive Information
CVE-2026-7666
CWE-319 Low
No
No
2.2.27-23, 4.2.15-16 04.06.2026 SB20260604100
SB2026060570
SB2026060571
and 5 more
#VU133360 - Improper Verification of Cryptographic Signature
CVE-2026-6873
CWE-347 Low
No
No
2.2.27-23, 4.2.15-16 04.06.2026 SB20260604100
SB2026060570
SB2026060571
and 5 more
#VU130190 - Improper input validation
CVE-2026-5766
CWE-20 Medium
No
No
2.2.27-23, 4.2.15-15 05.05.2026 SB20260505111
SB2026050601
SB20260507300
and 9 more
#VU130191 - Session Fixation
CVE-2026-35192
CWE-384 Medium
No
No
2.2.27-23, 4.2.15-15 05.05.2026 SB20260505111
SB2026050601
SB20260507300
and 10 more
#VU130192 - Use of Web Browser Cache Containing Sensitive Information
CVE-2026-6907
CWE-525 Medium
No
No
2.2.27-23, 4.2.15-15 05.05.2026 SB20260505111
SB2026050601
SB20260507300
and 9 more
#VU125093 - Improper input validation
CVE-2026-3902
CWE-20 Medium
No
No
4.2.15-15 07.04.2026 SB20260407104
SB20260407113
SB20260409114
and 11 more
#VU125094 - Improper Access Control
CVE-2026-4277
CWE-284 Low
No
No
2.2.27-22, 4.2.15-15 07.04.2026 SB20260407104
SB20260407113
SB20260409114
and 12 more
#VU125095 - Improper Access Control
CVE-2026-4292
CWE-284 Low
No
No
2.2.27-22, 4.2.15-15 07.04.2026 SB20260407104
SB20260407113
SB20260409114
and 12 more
#VU125096 - Resource exhaustion
CVE-2026-33033
CWE-400 Medium
No
No
2.2.27-22, 4.2.15-15 07.04.2026 SB20260407104
SB20260407113
SB20260409114
and 12 more
#VU125097 - Improper input validation
CVE-2026-33034
CWE-20 Medium
No
No
4.2.15-15 07.04.2026 SB20260407104
SB20260407113
SB20260409114
and 11 more
#VU123482 - Permissions, Privileges, and Access Controls
CVE-2026-25674
CWE-264 Low
No
No
2.2.27-22, 4.2.15-13 03.03.2026 SB2026030347
SB2026030574
SB2026030672
and 12 more


Showing elements 1 - 20 out of 65