https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 12:17:07 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-163340 EUVD-2026-163340 https://cve.radiocsirt.org/vuln/euvd-2026-163340 https://cve.radiocsirt.org/vuln/fkie_cve-2021-46898 <p>views/switch.py in django-grappelli (aka Django Grappelli) before 2.15.2 attempts to prevent external redirection with startswith(&#34;/&#34;) but this does not consider a protocol-relative URL (e.g., //example.com) attack.</p> <p>views/switch.py in django-grappelli (aka Django Grappelli) before 2.15.2 attempts to prevent external redirection with startswith(&#34;/&#34;) but this does not consider a protocol-relative URL (e.g., //example.com) attack.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-46898 https://cve.radiocsirt.org/vuln/ghsa-9x43-5qcq-h79q <p><strong>Affected:</strong> PyPI: django-grappelli</p> <p>views/switch.py in django-grappelli (aka Django Grappelli) before 2.15.2 attempts to prevent external redirection with startswith(&#34;/&#34;) but this does not consider a protocol-relative URL (e.g., //example.com) attack.</p> <p><strong>Affected:</strong> PyPI: django-grappelli</p> <p>views/switch.py in django-grappelli (aka Django Grappelli) before 2.15.2 attempts to prevent external redirection with startswith(&#34;/&#34;) but this does not consider a protocol-relative URL (e.g., //example.com) attack.</p> https://cve.radiocsirt.org/vuln/ghsa-9x43-5qcq-h79q https://cve.radiocsirt.org/vuln/gsd-2021-46898 gsd-2021-46898 https://cve.radiocsirt.org/vuln/gsd-2021-46898 https://cve.radiocsirt.org/vuln/opensuse-su-2023:0384-1 <p>Security update for python-django-grappelli</p> <p>Security update for python-django-grappelli</p> https://cve.radiocsirt.org/vuln/opensuse-su-2023:0384-1 https://cve.radiocsirt.org/vuln/pysec-2023-211 <p><strong>Affected:</strong> PyPI: django-grappelli</p> <p>views/switch.py in django-grappelli (aka Django Grappelli) before 2.15.2 attempts to prevent external redirection with startswith(&#34;/&#34;) but this does not consider a protocol-relative URL (e.g., //example.com) attack.</p> <p><strong>Affected:</strong> PyPI: django-grappelli</p> <p>views/switch.py in django-grappelli (aka Django Grappelli) before 2.15.2 attempts to prevent external redirection with startswith(&#34;/&#34;) but this does not consider a protocol-relative URL (e.g., //example.com) attack.</p> https://cve.radiocsirt.org/vuln/pysec-2023-211