Feed live

django CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

344,180

All time

Critical · Active

11,533

CVSS ≥ 9.0

New · 14 days

2,691

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 1–30 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-18818	medium	5.3/10	Ehco1996 django-sspanel Support Ticket views.py TicketDetailView authorization	Aug 4, 2026 2d ago
CVE-2026-16216	medium	5.3/10	geex-arts django-jet OAuth cross-site request forgery	Jul 19, 2026 19d ago
CVE-2026-16215	medium	6.9/10	geex-arts django-jet OAuth Credential Revoke authorization	Jul 19, 2026 19d ago
CVE-2026-16213	medium	4.8/10	Fantomas42 django-blog-zinnia Protected Entry Password entry_protection.py cleartext storage	Jul 19, 2026 19d ago
CVE-2026-16208	low	2.3/10	django-tastypie throttle.py CacheDBThrottle race condition	Jul 19, 2026 19d ago
CVE-2026-16207	medium	6.3/10	django-tastypie authentication.py ApiKeyAuthentication get request method with sensitive query strings	Jul 19, 2026 19d ago
CVE-2026-15188	medium	5.3/10	manjurulhoque django-job-portal Employee Dashboard Endpoint views.py EditEmployeeProfileAPIView access control	Jul 9, 2026 28d ago
CVE-2026-6873	low	3.1/10	Signed cookie salt namespace collision in django.http.HttpRequest.get_signed_cookie	Jun 3, 2026 2mo ago
CVE-2026-42196	critical	9.9/10	django-s3file: Relative path traversal	May 12, 2026 2mo ago
CVE-2026-6611	low	2.3/10	liangliangyy DjangoBlog File Upload Endpoint settings.py hard-coded key	Apr 20, 2026 3mo ago
CVE-2026-6610	medium	6.3/10	liangliangyy DjangoBlog Setting settings.py hard-coded credentials	Apr 20, 2026 3mo ago
CVE-2026-6609	medium	5.3/10	liangliangyy DjangoBlog views.py form_valid improper authorization	Apr 20, 2026 3mo ago
CVE-2026-6580	medium	6.9/10	liangliangyy DjangoBlog Amap API Call views.py hard-coded key	Apr 19, 2026 3mo ago
CVE-2026-6579	medium	6.9/10	liangliangyy DjangoBlog Clean Endpoint views.py missing authentication	Apr 19, 2026 3mo ago
CVE-2026-6578	medium	6.3/10	liangliangyy DjangoBlog Setting settings.py hard-coded credentials	Apr 19, 2026 3mo ago
CVE-2026-6577	medium	6.9/10	liangliangyy DjangoBlog logtracks Endpoint views.py missing authentication	Apr 19, 2026 3mo ago
CVE-2026-6576	medium	5.3/10	liangliangyy DjangoBlog WeChat Bot commonapi.py CommandHandler command injection	Apr 19, 2026 3mo ago
CVE-2026-40316	high	8.8/10	OWASP BLT has RCE in Github Actions via untrusted Django model execution in workflow	Apr 15, 2026 3mo ago
CVE-2026-31815	medium	5.3/10	django-unicorn affected by component state manipulation via unvalidated attribute access	Mar 10, 2026 4mo ago
CVE-2026-1285	—	—	Potential denial-of-service vulnerability in django.utils.text.Truncator HTML methods	Feb 3, 2026 6mo ago
CVE-2025-61783	medium	6.3/10	Python Social Auth - Django has unsafe account association	Oct 9, 2025 10mo ago
CVE-2025-7738	medium	4.4/10	Python3.11-django-ansible-base: sensitive authenticator secrets returned in clear text via api in aap	Jul 31, 2025 1y ago
CVE-2025-48383	high	8.2/10	Django-Select2 Vulnerable to Widget Instance Secret Cache Key Leaking	May 27, 2025 1y ago
CVE-2025-4894	medium	6.3/10	calmkart Django-sso-server crypto.py gen_rsa_keys inadequate encryption	May 18, 2025 1y ago
CVE-2025-24370	critical	9.3/10	Django-Unicorn Class Pollution Vulnerability, Leading to XSS, DoS and Authentication Bypass	Feb 3, 2025 1y ago
CVE-2024-11406	medium	6.9/10	Stored XSS in django CMS Attributes Fields	Nov 20, 2024 1y ago
CVE-2024-11404	medium	5.5/10	File Upload Bypass in django Filer	Nov 20, 2024 1y ago
CVE-2024-11319	medium	4.8/10	Stored XSS in Open Source Project "django-cms"	Nov 18, 2024 1y ago
CVE-2024-32879	medium	4.9/10	social-auth-app-django Improper Handling of Case Sensitivity vulnerability	Apr 24, 2024 2y ago
CVE-2024-28865	high	7.5/10	django-wiki denial of service via regular expression	Mar 18, 2024 2y ago