https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:39:17 +0000 https://cve.radiocsirt.org/vuln/bit-django-2021-32052 <p><strong>Affected:</strong> Bitnami: django</p> <p>In Django 2.2 before 2.2.22, 3.1 before 3.1.10, and 3.2 before 3.2.2 (with Python 3.9.5+), URLValidator does not prohibit newlines and tabs (unless the URLField form field is used). If an application uses values with newlines in an HTTP response, header injection can occur. Django itself is unaffected because HttpResponse prohibits newlines in HTTP headers.</p> <p><strong>Affected:</strong> Bitnami: django</p> <p>In Django 2.2 before 2.2.22, 3.1 before 3.1.10, and 3.2 before 3.2.2 (with Python 3.9.5+), URLValidator does not prohibit newlines and tabs (unless the URLField form field is used). If an application uses values with newlines in an HTTP response, header injection can occur. Django itself is unaffected because HttpResponse prohibits newlines in HTTP headers.</p> https://cve.radiocsirt.org/vuln/bit-django-2021-32052 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0514 certfr-2024-avi-0514 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0514 https://cve.radiocsirt.org/vuln/euvd-2026-27818 EUVD-2026-27818 https://cve.radiocsirt.org/vuln/euvd-2026-27818 https://cve.radiocsirt.org/vuln/fkie_cve-2021-32052 <p>In Django 2.2 before 2.2.22, 3.1 before 3.1.10, and 3.2 before 3.2.2 (with Python 3.9.5+), URLValidator does not prohibit newlines and tabs (unless the URLField form field is used). If an application uses values with newlines in an HTTP response, header injection can occur. Django itself is unaffected because HttpResponse prohibits newlines in HTTP headers.</p> <p>In Django 2.2 before 2.2.22, 3.1 before 3.1.10, and 3.2 before 3.2.2 (with Python 3.9.5+), URLValidator does not prohibit newlines and tabs (unless the URLField form field is used). If an application uses values with newlines in an HTTP response, header injection can occur. Django itself is unaffected because HttpResponse prohibits newlines in HTTP headers.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-32052 https://cve.radiocsirt.org/vuln/ghsa-qm57-vhq3-3fwf <p><strong>Affected:</strong> PyPI: Django</p> <p>In Django 2.2 before 2.2.22, 3.1 before 3.1.10, and 3.2 before 3.2.2 (with Python 3.9.5+), URLValidator does not prohibit newlines and tabs (unless the URLField form field is used). If an application uses values with newlines in an HTTP response, header injection can occur. Django itself is unaffected because HttpResponse prohibits newlines in HTTP headers.</p> <p><strong>Affected:</strong> PyPI: Django</p> <p>In Django 2.2 before 2.2.22, 3.1 before 3.1.10, and 3.2 before 3.2.2 (with Python 3.9.5+), URLValidator does not prohibit newlines and tabs (unless the URLField form field is used). If an application uses values with newlines in an HTTP response, header injection can occur. Django itself is unaffected because HttpResponse prohibits newlines in HTTP headers.</p> https://cve.radiocsirt.org/vuln/ghsa-qm57-vhq3-3fwf https://cve.radiocsirt.org/vuln/gsd-2021-32052 gsd-2021-32052 https://cve.radiocsirt.org/vuln/gsd-2021-32052 https://cve.radiocsirt.org/vuln/opensuse-su-2023:0005-1 <p>Security update for python-Django</p> <p>Security update for python-Django</p> https://cve.radiocsirt.org/vuln/opensuse-su-2023:0005-1 https://cve.radiocsirt.org/vuln/pysec-2021-8 <p><strong>Affected:</strong> PyPI: django</p> <p>In Django 2.2 before 2.2.22, 3.1 before 3.1.10, and 3.2 before 3.2.2 (with Python 3.9.5+), URLValidator does not prohibit newlines and tabs (unless the URLField form field is used). If an application uses values with newlines in an HTTP response, header injection can occur. Django itself is unaffected because HttpResponse prohibits newlines in HTTP headers.</p> <p><strong>Affected:</strong> PyPI: django</p> <p>In Django 2.2 before 2.2.22, 3.1 before 3.1.10, and 3.2 before 3.2.2 (with Python 3.9.5+), URLValidator does not prohibit newlines and tabs (unless the URLField form field is used). If an application uses values with newlines in an HTTP response, header injection can occur. Django itself is unaffected because HttpResponse prohibits newlines in HTTP headers.</p> https://cve.radiocsirt.org/vuln/pysec-2021-8 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-32052 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: python-django, Ubuntu:20.04:LTS: python-django</p> <p>In Django 2.2 before 2.2.22, 3.1 before 3.1.10, and 3.2 before 3.2.2 (with Python 3.9.5+), URLValidator does not prohibit newlines and tabs (unless the URLField form field is used). If an application uses values with newlines in an HTTP response, header injection can occur. Django itself is unaffected because HttpResponse prohibits newlines in HTTP headers.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: python-django, Ubuntu:20.04:LTS: python-django</p> <p>In Django 2.2 before 2.2.22, 3.1 before 3.1.10, and 3.2 before 3.2.2 (with Python 3.9.5+), URLValidator does not prohibit newlines and tabs (unless the URLField form field is used). If an application uses values with newlines in an HTTP response, header injection can occur. Django itself is unaffected because HttpResponse prohibits newlines in HTTP headers.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-32052