https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T10:10:09.443721+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-123550 EUVD-2026-123550 2026-10-04T10:10:09.448110+00:00 EUVD-2026-123550 https://cve.radiocsirt.org/vuln/fkie_cve-2009-2659 fkie_cve-2009-2659 2026-10-04T10:10:09.448140+00:00

The Admin media handler in core/servers/basehttp.py in Django 1.0 and 0.96 does not properly map URL requests to expected "static media files," which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a crafted URL.

 https://cve.radiocsirt.org/vuln/ghsa-9xg7-gg9m-rmq9 GHSA-9xg7-gg9m-rmq9 — Django Admin Media Handler Vulnerable to Directory Traversal 2026-10-04T10:10:09.448170+00:00

Affected: PyPI: Django

The Admin media handler in `core/servers/basehttp.py` in Django 1.0 and 0.96 does not properly map URL requests to expected "static media files," which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a crafted URL.

 https://cve.radiocsirt.org/vuln/gsd-2009-2659 gsd-2009-2659 2026-10-04T10:10:09.448194+00:00 gsd-2009-2659 https://cve.radiocsirt.org/vuln/pysec-2009-3 PYSEC-2009-3 2026-10-04T10:10:09.448206+00:00

Affected: PyPI: django

The Admin media handler in core/servers/basehttp.py in Django 1.0 and 0.96 does not properly map URL requests to expected "static media files," which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a crafted URL.