Django — свободный фреймворк для веб-приложений на языке Python, использующий шаблон проектирования MVC

In Django 1.11.x before 1.11.18, 2.0.x before 2.0.10, and 2.1.x before 2.1.5, an Improper Neutralization of Special Elements in Output Used by a Downstream Component issue exists in django.views.defaults.page_not_found(), leading to content spoofing (in a 404 error page) if a user fails to recognize that a crafted URL has malicious content.

In Django 1.11.x before 1.11.18, 2.0.x before 2.0.10, and 2.1.x before 2.1.5, an Improper Neutralization of Special Elements in Output Used by a Downstream Component issue exists in django.views.defaults.page_not_found(), leading to content spoofing (in a 404 error page) if a user fails to recognize that a crafted URL has malicious content.

Django vulnerable to XSS on 500 pages

Django open redirect and possible XSS attack via user-supplied numeric redirect URLs

Django open redirect

Django denial-of-service possibility in urlize and urlizetrunc template filters

Django Denial-of-service possibility in truncatechars_html and truncatewords_html template filters

Уязвимость библиотеки Django для языка программирования Python, позволяющая нарушителю нарушить целостность защищаемой информации

Django open redirect

Django vulnerable to information leakage in AuthenticationForm