https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T15:24:59.300427+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2011-4136 CVE-2011-4136 2026-10-16T15:24:59.334939+00:00

django.contrib.sessions in Django before 1.2.7 and 1.3.x before 1.3.1, when session data is stored in the cache, uses the root namespace for both session identifiers and application-data keys, which allows remote attackers to modify a session by triggering use of a key that is equal to that session's identifier.

 https://cve.radiocsirt.org/vuln/pysec-2011-1 PYSEC-2011-1 2026-10-16T15:24:59.335001+00:00

Affected: PyPI: django

django.contrib.sessions in Django before 1.2.7 and 1.3.x before 1.3.1, when session data is stored in the cache, uses the root namespace for both session identifiers and application-data keys, which allows remote attackers to modify a session by triggering use of a key that is equal to that session's identifier.