https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:44:02.148678+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-03449 cnvd-2015-03449 2026-10-02T17:44:02.251615+00:00 cnvd-2015-03449 https://cve.radiocsirt.org/vuln/euvd-2026-92238 EUVD-2026-92238 2026-10-02T17:44:02.251654+00:00 EUVD-2026-92238 https://cve.radiocsirt.org/vuln/fkie_cve-2015-3982 fkie_cve-2015-3982 2026-10-02T17:44:02.251669+00:00

The session.flush function in the cached_db backend in Django 1.8.x before 1.8.2 does not properly flush the session, which allows remote attackers to hijack user sessions via an empty string in the session key.

 https://cve.radiocsirt.org/vuln/ghsa-6wgp-fwfm-mxp3 GHSA-6wgp-fwfm-mxp3 — Django allows user sessions hijacking via an empty string in the session key 2026-10-02T17:44:02.251711+00:00

Affected: PyPI: Django

The session.flush function in the cached_db backend in Django 1.8.x before 1.8.2 does not properly flush the session, which allows remote attackers to hijack user sessions via an empty string in the session key.

 https://cve.radiocsirt.org/vuln/gsd-2015-3982 gsd-2015-3982 2026-10-02T17:44:02.251745+00:00 gsd-2015-3982 https://cve.radiocsirt.org/vuln/opensuse-su-2023:0077-1 openSUSE-SU-2023:0077-1 — Security update for python-Django 2026-10-02T17:44:02.251765+00:00

Security update for python-Django

 https://cve.radiocsirt.org/vuln/pysec-2015-19 PYSEC-2015-19 2026-10-02T17:44:02.251789+00:00

Affected: PyPI: django

The session.flush function in the cached_db backend in Django 1.8.x before 1.8.2 does not properly flush the session, which allows remote attackers to hijack user sessions via an empty string in the session key.