https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-14T22:47:14.813383+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-99476 EUVD-2026-99476 2026-10-14T22:47:14.896514+00:00 EUVD-2026-99476 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3730 fkie_cve-2014-3730 2026-10-14T22:47:14.896549+00:00

The django.util.http.is_safe_url function in Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly validate URLs, which allows remote attackers to conduct open redirect attacks via a malformed URL, as demonstrated by "http:\\\djangoproject.com."

 https://cve.radiocsirt.org/vuln/ghsa-vq3h-3q7v-9prw GHSA-vq3h-3q7v-9prw — Django Allows Open Redirects 2026-10-14T22:47:14.896584+00:00

Affected: PyPI: Django

The `django.util.http.is_safe_url` function in Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly validate URLs, which allows remote attackers to conduct open redirect attacks via a malformed URL, as demonstrated by "http:\\\djangoproject.com."

 https://cve.radiocsirt.org/vuln/gsd-2014-3730 gsd-2014-3730 2026-10-14T22:47:14.896612+00:00 gsd-2014-3730 https://cve.radiocsirt.org/vuln/pysec-2014-20 PYSEC-2014-20 2026-10-14T22:47:14.896625+00:00

Affected: PyPI: django

The django.util.http.is_safe_url function in Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly validate URLs, which allows remote attackers to conduct open redirect attacks via a malformed URL, as demonstrated by "http:\\\djangoproject.com."

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-3730 UBUNTU-CVE-2014-3730 2026-10-14T22:47:14.896644+00:00

Affected: Ubuntu:14.04:LTS: python-django

The django.util.http.is_safe_url function in Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly validate URLs, which allows remote attackers to conduct open redirect attacks via a malformed URL, as demonstrated by "http:\\\djangoproject.com."