Django allows user sessions hijacking via an empty string in the session key

Django settings leak in date template filter

SQL Injection in Django

Django allows unprivileged users to read the password hashes of arbitrary accounts

Django database denial-of-service with ModelMultipleChoiceField

Infinite Loop in Django

Django Incorrect HTTP detection with reverse-proxy connecting via HTTPS

Path Traversal in Django

Django Cross-site Scripting Vulnerability

Django Middleware Enables Session Hijacking

Cross-site request forgery in Django

Django vulnerable to denial-of-service attack via the urlize() and urlizetrunc() template filters

Django open redirect

Django vulnerable to Improper Restriction of Operations within the Bounds of a Memory Buffer

Django Image Field Vulnerable to Image Decompression Bombs

Django Cross-site scripting (XSS) vulnerability

Denial-of-service in Django

Django Template Engine Vulnerable to XSS

Django Denial of Service Vulnerability in the authentication framework

Django cross-site scripting (XSS) vulnerability in the AdminURLFieldWidget widget