Логотип exploitDog
bind:"GHSA-mjgh-79qc-68w3" OR bind:"CVE-2026-25674"
Консоль
Логотип exploitDog

exploitDog

bind:"GHSA-mjgh-79qc-68w3" OR bind:"CVE-2026-25674"

Количество 7

Количество 7

github логотип

GHSA-mjgh-79qc-68w3

22 дня назад

Django has a Race Condition vulnerability

CVSS3: 3.7
EPSS: Низкий
ubuntu логотип

CVE-2026-25674

22 дня назад

An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29. Race condition in file-system storage and file-based cache backends in Django allows an attacker to cause file system objects to be created with incorrect permissions via concurrent requests, where one thread's temporary `umask` change affects other threads in multi-threaded environments. Earlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected. Django would like to thank Tarek Nakkouch for reporting this issue.

CVSS3: 3.7
EPSS: Низкий
redhat логотип

CVE-2026-25674

22 дня назад

An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29. Race condition in file-system storage and file-based cache backends in Django allows an attacker to cause file system objects to be created with incorrect permissions via concurrent requests, where one thread's temporary `umask` change affects other threads in multi-threaded environments. Earlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected. Django would like to thank Tarek Nakkouch for reporting this issue.

CVSS3: 3.7
EPSS: Низкий
nvd логотип

CVE-2026-25674

22 дня назад

An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29. Race condition in file-system storage and file-based cache backends in Django allows an attacker to cause file system objects to be created with incorrect permissions via concurrent requests, where one thread's temporary `umask` change affects other threads in multi-threaded environments. Earlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected. Django would like to thank Tarek Nakkouch for reporting this issue.

CVSS3: 3.7
EPSS: Низкий
debian логотип

CVE-2026-25674

22 дня назад

An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4. ...

CVSS3: 3.7
EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2026:20373-1

9 дней назад

Security update for python-Django

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:0821-1

21 день назад

Security update for python-Django

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
github логотип
GHSA-mjgh-79qc-68w3

Django has a Race Condition vulnerability

CVSS3: 3.7
0%
Низкий
22 дня назад
ubuntu логотип
CVE-2026-25674

An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29. Race condition in file-system storage and file-based cache backends in Django allows an attacker to cause file system objects to be created with incorrect permissions via concurrent requests, where one thread's temporary `umask` change affects other threads in multi-threaded environments. Earlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected. Django would like to thank Tarek Nakkouch for reporting this issue.

CVSS3: 3.7
0%
Низкий
22 дня назад
redhat логотип
CVE-2026-25674

An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29. Race condition in file-system storage and file-based cache backends in Django allows an attacker to cause file system objects to be created with incorrect permissions via concurrent requests, where one thread's temporary `umask` change affects other threads in multi-threaded environments. Earlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected. Django would like to thank Tarek Nakkouch for reporting this issue.

CVSS3: 3.7
0%
Низкий
22 дня назад
nvd логотип
CVE-2026-25674

An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29. Race condition in file-system storage and file-based cache backends in Django allows an attacker to cause file system objects to be created with incorrect permissions via concurrent requests, where one thread's temporary `umask` change affects other threads in multi-threaded environments. Earlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected. Django would like to thank Tarek Nakkouch for reporting this issue.

CVSS3: 3.7
0%
Низкий
22 дня назад
debian логотип
CVE-2026-25674

An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4. ...

CVSS3: 3.7
0%
Низкий
22 дня назад
suse-cvrf логотип
openSUSE-SU-2026:20373-1

Security update for python-Django

0%
Низкий
9 дней назад
suse-cvrf логотип
SUSE-SU-2026:0821-1

Security update for python-Django

0%
Низкий
21 день назад

Уязвимостей на страницу