https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T21:01:57.857985+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-97024 EUVD-2026-97024 2026-10-12T21:01:57.862444+00:00 EUVD-2026-97024 https://cve.radiocsirt.org/vuln/fkie_cve-2014-0480 fkie_cve-2014-0480 2026-10-12T21:01:57.862471+00:00

The core.urlresolvers.reverse function in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 does not properly validate URLs, which allows remote attackers to conduct phishing attacks via a // (slash slash) in a URL, which triggers a scheme-relative URL to be generated.

 https://cve.radiocsirt.org/vuln/ghsa-f7cm-ccfp-3q4r GHSA-f7cm-ccfp-3q4r — Django Incorrectly Validates URLs 2026-10-12T21:01:57.862500+00:00

Affected: PyPI: Django

The `core.urlresolvers.reverse` function in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 does not properly validate URLs, which allows remote attackers to conduct phishing attacks via a `//` (slash slash) in a URL, which triggers a scheme-relative URL to be generated.

 https://cve.radiocsirt.org/vuln/gsd-2014-0480 gsd-2014-0480 2026-10-12T21:01:57.862525+00:00 gsd-2014-0480 https://cve.radiocsirt.org/vuln/pysec-2014-4 PYSEC-2014-4 2026-10-12T21:01:57.862537+00:00

Affected: PyPI: django

The core.urlresolvers.reverse function in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 does not properly validate URLs, which allows remote attackers to conduct phishing attacks via a // (slash slash) in a URL, which triggers a scheme-relative URL to be generated.

 https://cve.radiocsirt.org/vuln/suse-su-2015:0563-1 SUSE-SU-2015:0563-1 — Security update for python-django 2026-10-12T21:01:57.862556+00:00

Security update for python-django

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-0480 UBUNTU-CVE-2014-0480 2026-10-12T21:01:57.862573+00:00

Affected: Ubuntu:14.04:LTS: python-django

The core.urlresolvers.reverse function in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 does not properly validate URLs, which allows remote attackers to conduct phishing attacks via a // (slash slash) in a URL, which triggers a scheme-relative URL to be generated.