Django — свободный фреймворк для веб-приложений на языке Python, использующий шаблон проектирования MVC

Django allows enumeration of user e-mail addresses

Security update for python-Django

An issue was discovered in Django v5.1.1, v5.0.9, and v4.2.16. The django.contrib.auth.forms.PasswordResetForm class, when used in a view implementing password reset flows, allows remote attackers to enumerate user e-mail addresses by sending password reset requests and observing the outcome (only when e-mail sending is consistently failing).

An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16. The urlize() and urlizetrunc() template filters are subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters.

Уязвимость функции django.utils.html.urlize программной платформы для веб-приложений Django, позволяющая нарушителю вызвать отказ в обслуживании

Security update for python-Django

An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2. ...

An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2. ...

An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2. ...

An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2. ...