https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-14T14:02:05.243180+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2014-0480 CVE-2014-0480 2026-10-14T14:02:05.245445+00:00

The core.urlresolvers.reverse function in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 does not properly validate URLs, which allows remote attackers to conduct phishing attacks via a // (slash slash) in a URL, which triggers a scheme-relative URL to be generated.

 https://cve.radiocsirt.org/vuln/ghsa-f7cm-ccfp-3q4r GHSA-f7cm-ccfp-3q4r — Django Incorrectly Validates URLs 2026-10-14T14:02:05.245488+00:00

Affected: PyPI: Django

The `core.urlresolvers.reverse` function in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 does not properly validate URLs, which allows remote attackers to conduct phishing attacks via a `//` (slash slash) in a URL, which triggers a scheme-relative URL to be generated.