https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:12:50.885498+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2016-08259 cnvd-2016-08259 2026-10-02T23:12:51.200514+00:00 cnvd-2016-08259 https://cve.radiocsirt.org/vuln/euvd-2026-86605 EUVD-2026-86605 2026-10-02T23:12:51.200559+00:00 EUVD-2026-86605 https://cve.radiocsirt.org/vuln/fkie_cve-2016-7401 fkie_cve-2016-7401 2026-10-02T23:12:51.200573+00:00

The cookie parsing code in Django before 1.8.15 and 1.9.x before 1.9.10, when used on a site with Google Analytics, allows remote attackers to bypass an intended CSRF protection mechanism by setting arbitrary cookies.

 https://cve.radiocsirt.org/vuln/ghsa-crhm-qpjc-cm64 GHSA-crhm-qpjc-cm64 — Django CSRF Protection Bypass 2026-10-02T23:12:51.200602+00:00

Affected: PyPI: Django

The cookie parsing code in Django before 1.8.15 and 1.9.x before 1.9.10, when used on a site with Google Analytics, allows remote attackers to bypass an intended CSRF protection mechanism by setting arbitrary cookies.

 https://cve.radiocsirt.org/vuln/gsd-2016-7401 gsd-2016-7401 2026-10-02T23:12:51.200626+00:00 gsd-2016-7401 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11205-1 openSUSE-SU-2024:11205-1 — python36-Django-3.2.7-2.3 on GA media 2026-10-02T23:12:51.200637+00:00

python36-Django-3.2.7-2.3 on GA media

 https://cve.radiocsirt.org/vuln/pysec-2016-3 PYSEC-2016-3 2026-10-02T23:12:51.200671+00:00

Affected: PyPI: django

The cookie parsing code in Django before 1.8.15 and 1.9.x before 1.9.10, when used on a site with Google Analytics, allows remote attackers to bypass an intended CSRF protection mechanism by setting arbitrary cookies.

 https://cve.radiocsirt.org/vuln/rhsa-2016:2038 RHSA-2016:2038 — Red Hat Security Advisory: python-django security update 2026-10-02T23:12:51.200688+00:00

python-django: CSRF protection bypass on a site with Google Analytics

 https://cve.radiocsirt.org/vuln/suse-su-2018:0973-1 SUSE-SU-2018:0973-1 — Security update for python-Django 2026-10-02T23:12:51.200704+00:00

Security update for python-Django

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-7401 UBUNTU-CVE-2016-7401 2026-10-02T23:12:51.200720+00:00

Affected: Ubuntu:14.04:LTS: python-django, Ubuntu:16.04:LTS: python-django

The cookie parsing code in Django before 1.8.15 and 1.9.x before 1.9.10, when used on a site with Google Analytics, allows remote attackers to bypass an intended CSRF protection mechanism by setting arbitrary cookies.