Vulnerabilidades em djangoproject
52 resultadosAnálise Vexday
Django apresenta 38 vulnerabilidades cadastradas, com 13 publicadas nos últimos 90 dias, indicando atividade contínua de descoberta de falhas. Apenas 2 vulnerabilidades críticas foram identificadas e nenhuma está sendo explorada ativamente (KEV), sugerindo risco moderado no curto prazo. A fraqueza dominante (CWE-770) aponta para problemas de alocação de recursos, recomendando monitoramento de patches e revisão de configurações de limite em ambientes de produção.
CVE-2026-48587LOWPotential exposure of private data via whitespace padding in Vary headerEPSS 0.4%CVE-2026-6907LOWPotential exposure of private data due to incorrect handling of Vary: * in UpdateCacheMiddlewareEPSS 0.4%CVE-2026-15920MEDIUMPotential cross-site scripting via URLField values in the adminEPSS 0.4%CVE-2026-44545MEDIUMUnbounded WebSocket message and frame sizes can cause unauthenticated remote denial of serviceEPSS 0.3%CVE-2026-53878MEDIUMHeader injection possibility since DomainNameValidator accepted newlines in inputEPSS 0.3%CVE-2026-4292LOWPrivilege abuse in ModelAdmin.list_editableEPSS 0.3%CVE-2026-87890MEDIUMPotential request forgery via spatial lookup byte valuesEPSS 0.3%CVE-2026-8404LOWPotential exposure of private data via case-sensitive Cache-Control directives in UpdateCacheMiddlewareEPSS 0.3%CVE-2026-6873LOWSigned cookie salt namespace collision in django.http.HttpRequest.get_signed_cookieEPSS 0.2%CVE-2026-87975MEDIUMPrivilege abuse in model formsets with editable primary keysEPSS 0.2%CVE-2026-44546LOWHeader injection via WebSocket upgrade parser differential allows ASGI scope header spoofingEPSS 0.2%CVE-2026-7666LOWPotential unencrypted email transmission via STARTTLS in the SMTP backendEPSS 0.1%