https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 14:52:06 +0000 https://cve.radiocsirt.org/vuln/bdu:2015-11592 bdu:2015-11592 https://cve.radiocsirt.org/vuln/bdu:2015-11592 https://cve.radiocsirt.org/vuln/cnvd-2015-04478 cnvd-2015-04478 https://cve.radiocsirt.org/vuln/cnvd-2015-04478 https://cve.radiocsirt.org/vuln/euvd-2026-93183 EUVD-2026-93183 https://cve.radiocsirt.org/vuln/euvd-2026-93183 https://cve.radiocsirt.org/vuln/fkie_cve-2015-5144 <p>Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 uses an incorrect regular expression, which allows remote attackers to inject arbitrary headers and conduct HTTP response splitting attacks via a newline character in an (1) email message to the EmailValidator, a (2) URL to the URLValidator, or unspecified vectors to the (3) validate_ipv4_address or (4) validate_slug validator.</p> <p>Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 uses an incorrect regular expression, which allows remote attackers to inject arbitrary headers and conduct HTTP response splitting attacks via a newline character in an (1) email message to the EmailValidator, a (2) URL to the URLValidator, or unspecified vectors to the (3) validate_ipv4_address or (4) validate_slug validator.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-5144 https://cve.radiocsirt.org/vuln/ghsa-q5qw-4364-5hhm <p><strong>Affected:</strong> PyPI: Django</p> <p>Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 uses an incorrect regular expression, which allows remote attackers to inject arbitrary headers and conduct HTTP response splitting attacks via a newline character in an (1) email message to the EmailValidator, a (2) URL to the URLValidator, or unspecified vectors to the (3) validate_ipv4_address or (4) validate_slug validator.</p> <p><strong>Affected:</strong> PyPI: Django</p> <p>Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 uses an incorrect regular expression, which allows remote attackers to inject arbitrary headers and conduct HTTP response splitting attacks via a newline character in an (1) email message to the EmailValidator, a (2) URL to the URLValidator, or unspecified vectors to the (3) validate_ipv4_address or (4) validate_slug validator.</p> https://cve.radiocsirt.org/vuln/ghsa-q5qw-4364-5hhm https://cve.radiocsirt.org/vuln/gsd-2015-5144 gsd-2015-5144 https://cve.radiocsirt.org/vuln/gsd-2015-5144 https://cve.radiocsirt.org/vuln/pysec-2015-10 <p><strong>Affected:</strong> PyPI: django</p> <p>Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 uses an incorrect regular expression, which allows remote attackers to inject arbitrary headers and conduct HTTP response splitting attacks via a newline character in an (1) email message to the EmailValidator, a (2) URL to the URLValidator, or unspecified vectors to the (3) validate_ipv4_address or (4) validate_slug validator.</p> <p><strong>Affected:</strong> PyPI: django</p> <p>Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 uses an incorrect regular expression, which allows remote attackers to inject arbitrary headers and conduct HTTP response splitting attacks via a newline character in an (1) email message to the EmailValidator, a (2) URL to the URLValidator, or unspecified vectors to the (3) validate_ipv4_address or (4) validate_slug validator.</p> https://cve.radiocsirt.org/vuln/pysec-2015-10 https://cve.radiocsirt.org/vuln/suse-su-2015:1810-1 <p>Security update for python-Django</p> <p>Security update for python-Django</p> https://cve.radiocsirt.org/vuln/suse-su-2015:1810-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-5144 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: python-django</p> <p>Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 uses an incorrect regular expression, which allows remote attackers to inject arbitrary headers and conduct HTTP response splitting attacks via a newline character in an (1) email message to the EmailValidator, a (2) URL to the URLValidator, or unspecified vectors to the (3) validate_ipv4_address or (4) validate_slug validator.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: python-django</p> <p>Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 uses an incorrect regular expression, which allows remote attackers to inject arbitrary headers and conduct HTTP response splitting attacks via a newline character in an (1) email message to the EmailValidator, a (2) URL to the URLValidator, or unspecified vectors to the (3) validate_ipv4_address or (4) validate_slug validator.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-5144