https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T20:07:28.560058+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2016-01466 cnvd-2016-01466 2026-10-05T20:07:28.747584+00:00 cnvd-2016-01466 https://cve.radiocsirt.org/vuln/euvd-2026-83099 EUVD-2026-83099 2026-10-05T20:07:28.747628+00:00 EUVD-2026-83099 https://cve.radiocsirt.org/vuln/fkie_cve-2016-2512 fkie_cve-2016-2512 2026-10-05T20:07:28.747642+00:00

The utils.http.is_safe_url function in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks or possibly conduct cross-site scripting (XSS) attacks via a URL containing basic authentication, as demonstrated by http://mysite.example.com\@attacker.com.

 https://cve.radiocsirt.org/vuln/ghsa-pw27-w7w4-9qc7 GHSA-pw27-w7w4-9qc7 — Django XSS Vulnerability 2026-10-05T20:07:28.747672+00:00

Affected: PyPI: Django

The `utils.http.is_safe_url function` in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks or possibly conduct cross-site scripting (XSS) attacks via a URL containing basic authentication, as demonstrated by `http://mysite.example.com\@attacker.com`.

 https://cve.radiocsirt.org/vuln/gsd-2016-2512 gsd-2016-2512 2026-10-05T20:07:28.747697+00:00 gsd-2016-2512 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10361-1 openSUSE-SU-2024:10361-1 — python3-Django-1.10.4-1.1 on GA media 2026-10-05T20:07:28.747710+00:00

python3-Django-1.10.4-1.1 on GA media

 https://cve.radiocsirt.org/vuln/pysec-2016-15 PYSEC-2016-15 2026-10-05T20:07:28.747729+00:00

Affected: PyPI: django

The utils.http.is_safe_url function in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks or possibly conduct cross-site scripting (XSS) attacks via a URL containing basic authentication, as demonstrated by http://mysite.example.com\@attacker.com.

 https://cve.radiocsirt.org/vuln/rhsa-2016:0502 RHSA-2016:0502 — Red Hat Security Advisory: python-django security update 2026-10-05T20:07:28.747749+00:00

python-django: Malicious redirect and possible XSS attack via user-supplied redirect URLs containing basic auth python-django: User enumeration through timing difference on password hasher work factor upgrade

 https://cve.radiocsirt.org/vuln/suse-su-2018:1102-1 SUSE-SU-2018:1102-1 — Security update for python-Django 2026-10-05T20:07:28.747767+00:00

Security update for python-Django

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-2512 UBUNTU-CVE-2016-2512 2026-10-05T20:07:28.747787+00:00

Affected: Ubuntu:14.04:LTS: python-django

The utils.http.is_safe_url function in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks or possibly conduct cross-site scripting (XSS) attacks via a URL containing basic authentication, as demonstrated by http://mysite.example.com\@attacker.com.