← Back

Djangoproject

djangoproject

162 CVEs • 5 products

Products (5)

Click to collapse
Toggle
Django
django
157 CVEs
Daphne
daphne
2 CVEs
Piston
piston
1 CVE
Tastypie
tastypie
1 CVE
Channels
channels
1 CVE

CVEs (162)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2009-3695
1Djangoproject
1Django
Apr 23, 2026
Oct 13, 2009
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Algorithmic complexity vulnerability in the forms library in Django 1.0 before 1.0.4 and 1.1 before 1.1.1 allows remote attackers to cause a denial of service (CPU consumption) via a crafted (1) EmailField (email address...Show more
Algorithmic complexity vulnerability in the forms library in Django 1.0 before 1.0.4 and 1.1 before 1.1.1 allows remote attackers to cause a denial of service (CPU consumption) via a crafted (1) EmailField (email address) or (2) URLField (URL) that triggers a large amount of backtracking in a regular expression.Show less
CVE-2008-3909
2Django Project
Djangoproject
2Django
Django
Apr 16, 2026
Sep 4, 2008
N/A· v4
N/A· v3
5.8 MEDIUM· v2
The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP POST requests and processes them after successful authentication occurs, which allows remote attackers to conduct cross-site reque...Show more
The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP POST requests and processes them after successful authentication occurs, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and delete or modify data via unspecified requests.Show less