https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 22:47:15 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-99476 EUVD-2026-99476 https://cve.radiocsirt.org/vuln/euvd-2026-99476 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3730 <p>The django.util.http.is_safe_url function in Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly validate URLs, which allows remote attackers to conduct open redirect attacks via a malformed URL, as demonstrated by &#34;http:\\\djangoproject.com.&#34;</p> <p>The django.util.http.is_safe_url function in Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly validate URLs, which allows remote attackers to conduct open redirect attacks via a malformed URL, as demonstrated by &#34;http:\\\djangoproject.com.&#34;</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-3730 https://cve.radiocsirt.org/vuln/ghsa-vq3h-3q7v-9prw <p><strong>Affected:</strong> PyPI: Django</p> <p>The `django.util.http.is_safe_url` function in Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly validate URLs, which allows remote attackers to conduct open redirect attacks via a malformed URL, as demonstrated by &#34;http:\\\djangoproject.com.&#34;</p> <p><strong>Affected:</strong> PyPI: Django</p> <p>The `django.util.http.is_safe_url` function in Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly validate URLs, which allows remote attackers to conduct open redirect attacks via a malformed URL, as demonstrated by &#34;http:\\\djangoproject.com.&#34;</p> https://cve.radiocsirt.org/vuln/ghsa-vq3h-3q7v-9prw https://cve.radiocsirt.org/vuln/gsd-2014-3730 gsd-2014-3730 https://cve.radiocsirt.org/vuln/gsd-2014-3730 https://cve.radiocsirt.org/vuln/pysec-2014-20 <p><strong>Affected:</strong> PyPI: django</p> <p>The django.util.http.is_safe_url function in Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly validate URLs, which allows remote attackers to conduct open redirect attacks via a malformed URL, as demonstrated by &#34;http:\\\djangoproject.com.&#34;</p> <p><strong>Affected:</strong> PyPI: django</p> <p>The django.util.http.is_safe_url function in Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly validate URLs, which allows remote attackers to conduct open redirect attacks via a malformed URL, as demonstrated by &#34;http:\\\djangoproject.com.&#34;</p> https://cve.radiocsirt.org/vuln/pysec-2014-20 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-3730 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: python-django</p> <p>The django.util.http.is_safe_url function in Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly validate URLs, which allows remote attackers to conduct open redirect attacks via a malformed URL, as demonstrated by &#34;http:\\\djangoproject.com.&#34;</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: python-django</p> <p>The django.util.http.is_safe_url function in Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly validate URLs, which allows remote attackers to conduct open redirect attacks via a malformed URL, as demonstrated by &#34;http:\\\djangoproject.com.&#34;</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-3730