https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T21:42:14.862929+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-10817 cnvd-2017-10817 2026-10-02T21:42:15.218688+00:00 cnvd-2017-10817 https://cve.radiocsirt.org/vuln/euvd-2026-74553 EUVD-2026-74553 2026-10-02T21:42:15.218740+00:00 EUVD-2026-74553 https://cve.radiocsirt.org/vuln/fkie_cve-2017-7233 fkie_cve-2017-7233 2026-10-02T21:42:15.218755+00:00

Django 1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18 relies on user input in some cases to redirect the user to an "on success" URL. The security check for these redirects (namely ``django.utils.http.is_safe_url()``) considered some numeric URLs "safe" when they shouldn't be, aka an open redirect vulnerability. Also, if a developer relies on ``is_safe_url()`` to provide safe redirect targets and puts such a URL into a link, they could suffer from an XSS attack.

 https://cve.radiocsirt.org/vuln/ghsa-37hp-765x-j95x GHSA-37hp-765x-j95x — Django open redirect and possible XSS attack via user-supplied numeric redirect URLs 2026-10-02T21:42:15.218790+00:00

Affected: PyPI: Django

Django 1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18 relies on user input in some cases to redirect the user to an "on success" URL. The security check for these redirects (namely ``django.utils.http.is_safe_url()``) considered some numeric URLs "safe" when they shouldn't be, aka an open redirect vulnerability. Also, if a developer relies on ``is_safe_url()`` to provide safe redirect targets and puts such a URL into a link, they could suffer from an XSS attack.

 https://cve.radiocsirt.org/vuln/gsd-2017-7233 gsd-2017-7233 2026-10-02T21:42:15.218819+00:00 gsd-2017-7233 https://cve.radiocsirt.org/vuln/opensuse-su-2018:0632-1 openSUSE-SU-2018:0632-1 — Security update for python-Django 2026-10-02T21:42:15.218831+00:00

Security update for python-Django

 https://cve.radiocsirt.org/vuln/pysec-2017-9 PYSEC-2017-9 2026-10-02T21:42:15.218851+00:00

Affected: PyPI: django

Django 1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18 relies on user input in some cases to redirect the user to an "on success" URL. The security check for these redirects (namely ``django.utils.http.is_safe_url()``) considered some numeric URLs "safe" when they shouldn't be, aka an open redirect vulnerability. Also, if a developer relies on ``is_safe_url()`` to provide safe redirect targets and puts such a URL into a link, they could suffer from an XSS attack.

 https://cve.radiocsirt.org/vuln/rhsa-2017:1445 RHSA-2017:1445 — Red Hat Security Advisory: python-django security update 2026-10-02T21:42:15.218872+00:00

python-django: Open redirect and possible XSS attack via user-supplied numeric redirect URLs

 https://cve.radiocsirt.org/vuln/suse-su-2018:0973-1 SUSE-SU-2018:0973-1 — Security update for python-Django 2026-10-02T21:42:15.218888+00:00

Security update for python-Django

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-7233 UBUNTU-CVE-2017-7233 2026-10-02T21:42:15.218904+00:00

Affected: Ubuntu:14.04:LTS: python-django, Ubuntu:16.04:LTS: python-django

Django 1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18 relies on user input in some cases to redirect the user to an "on success" URL. The security check for these redirects (namely ``django.utils.http.is_safe_url()``) considered some numeric URLs "safe" when they shouldn't be, aka an open redirect vulnerability. Also, if a developer relies on ``is_safe_url()`` to provide safe redirect targets and puts such a URL into a link, they could suffer from an XSS attack.