18 entries matching django — updated 2026-09-18 · vulnfeed
| CVE / ID | Title | Severity | CVSS | EPSS | Source | Date |
|---|---|---|---|---|---|---|
| CVE-2026-93456 | django-page-cms through 2.0.13 exempts five admin mutation views from CSRF protection in pages/admin/views.py, allowing | HIGH | 8.4 | 5%ile | NVD | 2026-09-18 |
| CVE-2026-93455 | django-page-cms through 2.0.13 fails to properly validate page permissions in admin helper views, allowing any staff acc | HIGH | 7.1 | 18%ile | NVD | 2026-09-18 |
| GHSA-xjw9-38cr-6372 | djust: A template binding inherits a context safety grant it never earned (XSS) | HIGH | — | — | GitHub | 2026-09-17 |
| GHSA-9395-2g46-rj3f | djust: Six template-layer defects emit attacker-controlled markup unescaped (XSS) | HIGH | — | — | GitHub | 2026-09-17 |
| CVE-2026-61594 | djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to | CRITICAL | 9.1 | 36%ile | NVD | 2026-09-16 |
| CVE-2026-61599 | djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to | HIGH | 8.8 | 32%ile | NVD | 2026-09-16 |
| CVE-2026-61593 | djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to | HIGH | 8.1 | 8%ile | NVD | 2026-09-16 |
| CVE-2026-61591 | djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to | HIGH | 8.1 | 7%ile | NVD | 2026-09-16 |
| CVE-2026-61595 | djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to | HIGH | 7.7 | 32%ile | NVD | 2026-09-16 |
| CVE-2026-61590 | djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to | HIGH | 7.4 | 27%ile | NVD | 2026-09-16 |
| CVE-2026-61592 | djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to | HIGH | 7.4 | 22%ile | NVD | 2026-09-16 |
| CVE-2026-61598 | djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to | HIGH | 7.1 | 35%ile | NVD | 2026-09-16 |
| CVE-2026-61596 | djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to | HIGH | 7.1 | 15%ile | NVD | 2026-09-16 |
| CVE-2026-61588 | djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to | MEDIUM | 6.5 | 23%ile | NVD | 2026-09-16 |
| CVE-2026-61589 | djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to | MEDIUM | 6.3 | 5%ile | NVD | 2026-09-16 |
| CVE-2026-61597 | djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to | MEDIUM | 5.1 | 23%ile | NVD | 2026-09-16 |
| CVE-2026-90806 | A vulnerability has been found in DjangoCRM django-crm up to 1.2. This vulnerability affects the function BulkUpdateCase | MEDIUM | 5.3 | 30%ile | NVD | 2026-09-14 |
| CVE-2015-5143 | OSSN-0054: = Potential Denial of Service in Horizon login = | UNKNOWN | — | 94%ile | OpenStack | 2026-08-27 |