Django is subject to SQL injection through its column aliases

SQL Injection in Django

Django allows unprivileged users to read the password hashes of arbitrary accounts

Django database denial-of-service with ModelMultipleChoiceField

Infinite Loop in Django

Django Incorrect HTTP detection with reverse-proxy connecting via HTTPS

Path Traversal in Django

Django Cross-site Scripting Vulnerability

Django has an SQL Injection issue

Django Middleware Enables Session Hijacking

Django has potential DoS via MultiPartParser through crafted multipart uploads

Cross-site request forgery in Django

Django Uses Cache Containing Sensitive Information

Django vulnerable to denial-of-service attack via the urlize() and urlizetrunc() template filters

Django open redirect

Django vulnerable to Improper Restriction of Operations within the Bounds of a Memory Buffer

Django Image Field Vulnerable to Image Decompression Bombs

Django Cross-site scripting (XSS) vulnerability

Denial-of-service in Django

Django has Inefficient Algorithmic Complexity