Regular expression denial-of-service in Django

Django Directory Traversal via ssi template tag

Django Potential account hijack via password reset form

Uncontrolled Recursion in Django

Potential bypass of an upstream access control based on URL paths in Django

Path Traversal in Django

Django data leakage via querystring manipulation in admin

Code Injection in Django

Django allows enumeration of user e-mail addresses

Django is vulnerable to SQL injection in column aliases

Django Vulnerable to Cache Poisoning

Django vulnerable to information leakage in AuthenticationForm

Django vulnerable to denial-of-service attack

Django Data leakage via admin history log

Django cross-site request forgery (CSRF) vulnerability

Django bypasses validation when using one form field to upload multiple files

Django has a denial-of-service vulnerability in HttpResponseRedirect and HttpResponsePermanentRedirect on Windows

Django denial-of-service vulnerability in internationalized URLs

Django: UpdateCacheMiddleware may disclose private cached responses by omitting Authorization from Vary

Django potential denial of service vulnerability in UsernameField on Windows