PkgSeer

Vulnerabilities

Last updated 1 hour ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
django Django Vulnerable to Allocation of Resources Without Limits or Throttling Medium Risk 5.0 1 year ago 2 hours ago
django-unicorn Django-Unicorn Class Pollution Vulnerability, Leading to XSS, DoS and Authentication Bypass Critical 9.5 1 year ago 8 days ago
django-s3file django-s3file is vulnerable to relative path traversal Critical 9.5 6 months ago 8 days ago
djangorestframework Django REST framework: TokenProxy.delete() reports success and revokes nothing High Risk 7.4 13 days ago 13 days ago
djangorestframework Django REST framework: Accept header with many large quoted parameters burns ~19s of CPU per request in content negotiation High Risk 7.5 13 days ago 13 days ago
djangorestframework Django REST framework: JSONParser applies an attacker-named codec to the request stream High Risk 7.5 13 days ago 13 days ago
django Django GeoDjango vulnerable to denial of service through deeply nested geometry collections Medium Risk 5.3 3 months ago 23 days ago
django-haystack django-haystack: Remote Code Execution via `eval()` in Elasticsearch Result Deserialization High Risk 8.0 3 months ago 29 days ago
django Django GeoDjango spatial lookups allow file writes and outbound requests through GDAL raster parsing High Risk 8.8 3 months ago 1 month ago
django Django GeoDjango spatial lookups allow file writes and outbound requests through GDAL raster parsing High Risk 8.8 1 month ago 1 month ago
django No summary available Unknown 3 months ago 1 month ago
django-cms django CMS: Clipboard copy IDOR discloses unauthorized plugin content Medium Risk 6.5 2 months ago 1 month ago
django-cms django CMS: Stored XSS in edit-mode plugin exception rendering Medium Risk 4.4 2 months ago 1 month ago
djangorestframework Django REST framework: Potential bypass of Django `DATA_UPLOAD_MAX_MEMORY_SIZE` when parsing oversized JSON and urlencoded request bodies via DRF `request.data` Medium Risk 5.3 2 months ago 1 month ago
django-cms django CMS: Plugin move endpoint allows cyclic reparenting (DoS) High Risk 7.1 2 months ago 1 month ago
django-cms django CMS: Missing authorization in `render_object_structure` discloses non-PageContent placeholder structure to low-privileged staff Medium Risk 4.3 2 months ago 1 month ago
djangorestframework Django REST framework: AdminRenderer may disclose GET-protected data when rendering invalid write requests Medium Risk 4.3 2 months ago 1 month ago
django-cms django CMS: Broken access control in page *Duplicate* allows reading the content of any page (cross-site / restriction bypass) Medium Risk 6.5 2 months ago 1 month ago
django-cms django CMS: Page cache ignores plugin-declared Vary headers (disclosure & poisoning) Medium Risk 4.8 2 months ago 1 month ago
django-cms django CMS: Structure endpoint bypasses page-view permission Medium Risk 6.5 2 months ago 1 month ago
django-cms django CMS: Clipboard copy IDOR discloses unauthorized plugin content Medium Risk 6.5 1 month ago 1 month ago
django-cms django CMS: Page cache ignores plugin-declared Vary headers (disclosure & poisoning) Medium Risk 4.8 1 month ago 1 month ago
django-cms django CMS: Missing authorization in `render_object_structure` discloses non-PageContent placeholder structure to low-privileged staff Medium Risk 4.3 1 month ago 1 month ago
djangorestframework Django REST framework: AdminRenderer may disclose GET-protected data when rendering invalid write requests Medium Risk 4.3 1 month ago 1 month ago
django-cms django CMS: Broken access control in page *Duplicate* allows reading the content of any page (cross-site / restriction bypass) Medium Risk 6.5 1 month ago 1 month ago
django-cms django CMS: Plugin move endpoint allows cyclic reparenting (DoS) High Risk 7.1 1 month ago 1 month ago
django-cms django CMS: Stored XSS in edit-mode plugin exception rendering Medium Risk 4.4 1 month ago 1 month ago
django-cms django CMS: Structure endpoint bypasses page-view permission Medium Risk 6.5 1 month ago 1 month ago
djangorestframework Django REST framework: Potential bypass of Django `DATA_UPLOAD_MAX_MEMORY_SIZE` when parsing oversized JSON and urlencoded request bodies via DRF `request.data` Medium Risk 5.3 1 month ago 1 month ago
django Django: DomainNameValidator permits newline characters that may enable HTTP header injection Medium Risk 6.1 4 months ago 1 month ago
django Django: GDALRaster may over-read heap memory when constructed from bytes Medium Risk 4.8 4 months ago 1 month ago
django Django: cache middleware may expose private responses when unrelated request cookies are present Low Risk 3.1 4 months ago 1 month ago
django Django fails to prevent reuse of a partially-initialized connection after a failed `STARTTLS` handshake Low Risk 3.1 5 months ago 1 month ago
django Django has an Improper Handling of Length Parameter Inconsistency Medium Risk 5.3 6 months ago 1 month ago
django Django vulnerable to privilege abuse in GenericInlineModelAdmin Low Risk 3.0 7 months ago 1 month ago
django Django: SGI requests with a missing or understated `Content-Length` header could bypass the `DATA_UPLOAD_MAX_MEMORY_SIZE` limit High Risk 7.5 7 months ago 1 month ago
django Django has Inefficient Algorithmic Complexity Low Risk 3.0 9 months ago 1 month ago
django Django has a denial-of-service vulnerability in HttpResponseRedirect and HttpResponsePermanentRedirect on Windows High Risk 7.5 12 months ago 1 month ago
django Django is vulnerable to SQL injection in column aliases Medium Risk 4.3 11 months ago 1 month ago
django Django has a denial-of-service possibility in strip_tags() Medium Risk 5.3 1 year ago 1 month ago
django Django denial-of-service in django.utils.html.strip_tags() High Risk 7.5 1 year ago 1 month ago
django Django: signed cookies are vulnerable to salt namespace collisions Low Risk 3.1 5 months ago 1 month ago
django Django: UpdateCacheMiddleware may disclose cached responses due to case-sensitive Cache-Control handling Low Risk 3.1 5 months ago 1 month ago
django Django: has_vary_header may expose cached responses when Vary values contain whitespace Low Risk 3.1 5 months ago 1 month ago
django Django Uses Persistent Cookies Containing Sensitive Information Low Risk 3.0 6 months ago 1 month ago
django Django Uses Cache Containing Sensitive Information Medium Risk 4.3 6 months ago 1 month ago
django Django vulnerable to privilege abuse in ModelAdmin.list_editable Low Risk 2.7 7 months ago 1 month ago
django Django vulnerable to ASGI header spoofing via underscore/hyphen conflation High Risk 7.5 7 months ago 1 month ago
django Django has potential DoS via MultiPartParser through crafted multipart uploads Medium Risk 6.5 7 months ago 1 month ago
django Django has a Race Condition vulnerability Low Risk 3.7 8 months ago 1 month ago
Data courtesy of OSV.dev
Page 1