Django Allows Redirect via Data URL

Django allows user sessions hijacking via an empty string in the session key

Django settings leak in date template filter

Django is subject to SQL injection through its column aliases

SQL Injection in Django

Django allows unprivileged users to read the password hashes of arbitrary accounts

Django database denial-of-service with ModelMultipleChoiceField

Infinite Loop in Django

Django Incorrect HTTP detection with reverse-proxy connecting via HTTPS

Path Traversal in Django

Django Cross-site Scripting Vulnerability

Django has an SQL Injection issue

Django Middleware Enables Session Hijacking

Cross-site request forgery in Django

Django vulnerable to denial-of-service attack via the urlize() and urlizetrunc() template filters

Django open redirect

Django vulnerable to Improper Restriction of Operations within the Bounds of a Memory Buffer

Django Image Field Vulnerable to Image Decompression Bombs

Django Cross-site scripting (XSS) vulnerability

Denial-of-service in Django