https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:31:04.229103+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-44420 CVE-2021-44420 2026-10-02T23:31:04.231774+00:00

In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, HTTP requests for URLs with trailing newlines could bypass upstream access control based on URL paths.

 https://cve.radiocsirt.org/vuln/ghsa-v6rh-hp5x-86rv GHSA-v6rh-hp5x-86rv — Potential bypass of an upstream access control based on URL paths in Django 2026-10-02T23:31:04.231817+00:00

Affected: PyPI: Django

In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, HTTP requests for URLs with trailing newlines could bypass upstream access control based on URL paths. This issue has low severity, according to the Django security policy.