python-django vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the python-django package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • C
SQL Injection

*
  • C
SQL Injection

*
  • C
SQL Injection

*
  • L
Cross-site Scripting (XSS)

*
  • L
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • L
CVE-2021-45115

*
  • L
Directory Traversal

*
  • L
Exposure of Resource to Wrong Sphere

*
  • L
CVE-2021-44420

*
  • L
Server-Side Request Forgery (SSRF)

*
  • L
Directory Traversal

*
  • L
Cross-site Scripting (XSS)

*
  • L
Unrestricted Upload of File with Dangerous Type

*
  • L
Directory Traversal

*
  • L
HTTP Request Smuggling

*
  • L
Directory Traversal

*
  • H
Incorrect Default Permissions

*
  • H
Incorrect Default Permissions

*
  • M
Cross-site Scripting (XSS)

<1:1.11.29-1~deb10u1
  • M
Improper Certificate Validation

<1:1.11.29-1~deb10u1
  • H
SQL Injection

<1:1.11.29-1~deb10u1
  • C
SQL Injection

<1:1.11.28-1~deb10u1
  • C
Weak Password Recovery Mechanism for Forgotten Password

<1:1.11.27-1~deb10u1
  • H
Resource Exhaustion

<1:1.11.23-1~deb10u1
  • C
SQL Injection

<1:1.11.23-1~deb10u1
  • H
Resource Exhaustion

<1:1.11.23-1~deb10u1
  • H
Uncontrolled Recursion

<1:1.11.23-1~deb10u1
  • M
Cleartext Transmission of Sensitive Information

<1:1.11.22-1~deb10u1
  • M
Cross-site Scripting (XSS)

<1:1.11.21-1
  • L
Allocation of Resources Without Limits or Throttling

<1:1.11.20-1
  • M
Arbitrary Code Injection

<1:1.11.18-1
  • M
Open Redirect

<1:1.11.15-1
  • M
Incorrect Regular Expression

<1:1.11.11-1
  • M
Incorrect Regular Expression

<1:1.11.11-1
  • H
Information Exposure

<1:1.11.10-1
  • L
Cross-site Scripting (XSS)

<1:1.11.5-1
  • M
Open Redirect

<1:1.10.7-1
  • M
Open Redirect

<1:1.10.7-1
  • C
Use of Hard-coded Credentials

<1:1.10.3-1
  • H
Access Restriction Bypass

<1:1.10.3-1
  • L
Security Features

<1:1.10-1
  • M
Cross-site Scripting (XSS)

<1:1.9.8-1
  • L
Information Exposure

<1.9.4-1
  • H
Cross-site Scripting (XSS)

<1.9.4-1
  • M
Improper Access Control

<1.9.2-1
  • M
Information Exposure

<1.8.7-1
  • M
Resource Management Errors

<1.7.10-1
  • M
Resource Management Errors

<1.7.10-1
  • H
Resource Management Errors

<1.7.9-1
  • M
Improper Input Validation

<1.7.9-1
  • M
Resource Management Errors

<1.7.7-1
  • M
Cross-site Scripting (XSS)

<1.7.7-1
  • M
Cross-site Scripting (XSS)

<1.7.6-1
  • M
Code

<1.7.1-1.1
  • M
Code

<1.7.1-1.1
  • M
Cross-site Scripting (XSS)

<1.7.1-1.1
  • M
Resource Management Errors

<1.7.1-1.1
  • M
Improper Input Validation

<1.6.6-1
  • L
Access Restriction Bypass

<1.6.6-1
  • M
Improper Authentication

<1.6.6-1
  • M
Resource Management Errors

<1.6.6-1
  • M
Improper Input Validation

<1.6.5-1
  • M
CVE-2014-1418

<1.6.5-1
  • C
Resource Management Errors

<1.6.3-1
  • M
Access Restriction Bypass

<1.6.3-1
  • M
Arbitrary Code Injection

<1.6.3-1
  • M
Cross-site Scripting (XSS)

<1.5.2-1
  • M
Cross-site Scripting (XSS)

<1.5.2-1
  • M
Improper Authentication

<1.5.4-1
  • M
Directory Traversal

<1.5.3-1
  • M
Numeric Errors

<1.4.4-1
  • M
Information Exposure

<1.4.4-1
  • M
Information Exposure

<1.4.4-1
  • M
Improper Input Validation

<1.4.2-1
  • M
Improper Input Validation

<1.4.1-1
  • M
Out-of-Bounds

<1.4.1-1
  • M
Cross-site Scripting (XSS)

<1.4.1-1
  • M
Cross-site Request Forgery (CSRF)

<1.3.1-1
  • M
Resource Management Errors

<1.3.1-1
  • M
Improper Input Validation

<1.3.1-1
  • M
Improper Input Validation

<1.3.1-1
  • M
Improper Input Validation

<1.3.1-1
  • M
Cross-site Request Forgery (CSRF)

<1.2.5-1
  • M
Cross-site Scripting (XSS)

<1.2.5-1
  • M
Improper Input Validation

<1.2.4-1
  • M
Access Restriction Bypass

<1.2.4-1
  • L
Cross-site Scripting (XSS)

<1.2.3-1
  • M
CVE-2009-3695

<1.1.1-1
  • L
Directory Traversal

<1.1-1
  • M
Cross-site Request Forgery (CSRF)

<1.0-1
  • L
Cross-site Scripting (XSS)

<0.96.2-1
  • L
Cross-site Request Forgery (CSRF)

<1.2.1
  • L
Resource Management Errors

<0.96-1.1
  • H
CVE-2007-0404

<0.95.1-1
  • M
CVE-2007-0405

<0.95.1-1