https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T21:52:06.394154+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-03754 bdu:2021-03754 2026-10-03T21:52:06.472655+00:00 bdu:2021-03754 https://cve.radiocsirt.org/vuln/bit-django-2021-3281 BIT-django-2021-3281 2026-10-03T21:52:06.472694+00:00

Affected: Bitnami: django

In Django 2.2 before 2.2.18, 3.0 before 3.0.12, and 3.1 before 3.1.6, the django.utils.archive.extract method (used by "startapp --template" and "startproject --template") allows directory traversal via an archive with absolute paths or relative paths with dot segments.

 https://cve.radiocsirt.org/vuln/euvd-2026-20780 EUVD-2026-20780 2026-10-03T21:52:06.472727+00:00 EUVD-2026-20780 https://cve.radiocsirt.org/vuln/fkie_cve-2021-3281 fkie_cve-2021-3281 2026-10-03T21:52:06.472741+00:00

In Django 2.2 before 2.2.18, 3.0 before 3.0.12, and 3.1 before 3.1.6, the django.utils.archive.extract method (used by "startapp --template" and "startproject --template") allows directory traversal via an archive with absolute paths or relative paths with dot segments.

 https://cve.radiocsirt.org/vuln/ghsa-fvgf-6h6h-3322 GHSA-fvgf-6h6h-3322 — Django Directory Traversal via archive.extract 2026-10-03T21:52:06.472764+00:00

Affected: PyPI: Django

In Django 2.2 before 2.2.18, 3.0 before 3.0.12, and 3.1 before 3.1.6, the django.utils.archive.extract method (used by "startapp --template" and "startproject --template") allows directory traversal via an archive with absolute paths or relative paths with dot segments.

 https://cve.radiocsirt.org/vuln/gsd-2021-3281 gsd-2021-3281 2026-10-03T21:52:06.472788+00:00 gsd-2021-3281 https://cve.radiocsirt.org/vuln/pysec-2021-9 PYSEC-2021-9 2026-10-03T21:52:06.472800+00:00

Affected: PyPI: django

In Django 2.2 before 2.2.18, 3.0 before 3.0.12, and 3.1 before 3.1.6, the django.utils.archive.extract method (used by "startapp --template" and "startproject --template") allows directory traversal via an archive with absolute paths or relative paths with dot segments.

 https://cve.radiocsirt.org/vuln/rhsa-2021:0780 RHSA-2021:0780 — Red Hat Security Advisory: Red Hat Ansible Tower 3.8.2-1 - Container security and bug fix update 2026-10-03T21:52:06.472818+00:00

python-autobahn: allows redirect header injection django: Potential directory-traversal via archive.extract() ansible-tower: Privilege escalation via job isolation escape

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-3281 UBUNTU-CVE-2021-3281 2026-10-03T21:52:06.472839+00:00

Affected: Ubuntu:Pro:14.04:LTS: python-django, Ubuntu:16.04:LTS: python-django, Ubuntu:18.04:LTS: python-django, Ubuntu:20.04:LTS: python-django

In Django 2.2 before 2.2.18, 3.0 before 3.0.12, and 3.1 before 3.1.6, the django.utils.archive.extract method (used by "startapp --template" and "startproject --template") allows directory traversal via an archive with absolute paths or relative paths with dot segments.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1352 WID-SEC-W-2022-1352 — Ansible Tower: Mehrere Schwachstellen 2026-10-03T21:52:06.472862+00:00

Ein lokaler oder entfernter Angreifer kann mehrere Schwachstellen in Ansible Tower ausnutzen, um Informationen offenzulegen oder seine Privilegien zu erweitern.