https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:10:14 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-06450 bdu:2025-06450 https://cve.radiocsirt.org/vuln/bdu:2025-06450 https://cve.radiocsirt.org/vuln/bit-django-2025-48432 <p><strong>Affected:</strong> Bitnami: django</p> <p>An issue was discovered in Django 5.2 before 5.2.3, 5.1 before 5.1.11, and 4.2 before 4.2.23. Internal HTTP response logging does not escape request.path, which allows remote attackers to potentially manipulate log output via crafted URLs. This may lead to log injection or forgery when logs are viewed in terminals or processed by external systems.</p> <p><strong>Affected:</strong> Bitnami: django</p> <p>An issue was discovered in Django 5.2 before 5.2.3, 5.1 before 5.1.11, and 4.2 before 4.2.23. Internal HTTP response logging does not escape request.path, which allows remote attackers to potentially manipulate log output via crafted URLs. This may lead to log injection or forgery when logs are viewed in terminals or processed by external systems.</p> https://cve.radiocsirt.org/vuln/bit-django-2025-48432 https://cve.radiocsirt.org/vuln/euvd-2026-243996 EUVD-2026-243996 https://cve.radiocsirt.org/vuln/euvd-2026-243996 https://cve.radiocsirt.org/vuln/fkie_cve-2025-48432 <p>An issue was discovered in Django 5.2 before 5.2.3, 5.1 before 5.1.11, and 4.2 before 4.2.23. Internal HTTP response logging does not escape request.path, which allows remote attackers to potentially manipulate log output via crafted URLs. This may lead to log injection or forgery when logs are viewed in terminals or processed by external systems.</p> <p>An issue was discovered in Django 5.2 before 5.2.3, 5.1 before 5.1.11, and 4.2 before 4.2.23. Internal HTTP response logging does not escape request.path, which allows remote attackers to potentially manipulate log output via crafted URLs. This may lead to log injection or forgery when logs are viewed in terminals or processed by external systems.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-48432 https://cve.radiocsirt.org/vuln/ghsa-7xr5-9hcq-chf9 <p><strong>Affected:</strong> PyPI: Django</p> <p>An issue was discovered in Django 5.2 before 5.2.2, 5.1 before 5.1.10, and 4.2 before 4.2.22. Internal HTTP response logging does not escape request.path, which allows remote attackers to potentially manipulate log output via crafted URLs. This may lead to log injection or forgery when logs are viewed in terminals or processed by external systems.</p> <p><strong>Affected:</strong> PyPI: Django</p> <p>An issue was discovered in Django 5.2 before 5.2.2, 5.1 before 5.1.10, and 4.2 before 4.2.22. Internal HTTP response logging does not escape request.path, which allows remote attackers to potentially manipulate log output via crafted URLs. This may lead to log injection or forgery when logs are viewed in terminals or processed by external systems.</p> https://cve.radiocsirt.org/vuln/ghsa-7xr5-9hcq-chf9 https://cve.radiocsirt.org/vuln/oesa-2025-1617 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: python-django</p> <p>A high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fix(es):</p> <p>A vulnerability, which was classified as problematic, was found in Django up to 4.2.21/5.1.9/5.2.1 (Content Management System).CWE is classifying the issue as CWE-117. The product does not neutralize or incorrectly neutralizes output that is written to logs.This is going to have an impact on integrity.Upgrading to version 4.2.22, 5.1.10 or 5.2.2 eliminates this vulnerability.(CVE-2025-48432)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: python-django</p> <p>A high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fix(es):</p> <p>A vulnerability, which was classified as problematic, was found in Django up to 4.2.21/5.1.9/5.2.1 (Content Management System).CWE is classifying the issue as CWE-117. The product does not neutralize or incorrectly neutralizes output that is written to logs.This is going to have an impact on integrity.Upgrading to version 4.2.22, 5.1.10 or 5.2.2 eliminates this vulnerability.(CVE-2025-48432)</p> https://cve.radiocsirt.org/vuln/oesa-2025-1617 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15267-1 <p>python311-Django-5.2.2-1.1 on GA media</p> <p>python311-Django-5.2.2-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:15267-1 https://cve.radiocsirt.org/vuln/pysec-2025-47 <p><strong>Affected:</strong> PyPI: django</p> <p>An issue was discovered in Django 5.2 before 5.2.2, 5.1 before 5.1.10, and 4.2 before 4.2.22. Internal HTTP response logging does not escape request.path, which allows remote attackers to potentially manipulate log output via crafted URLs. This may lead to log injection or forgery when logs are viewed in terminals or processed by external systems.</p> <p><strong>Affected:</strong> PyPI: django</p> <p>An issue was discovered in Django 5.2 before 5.2.2, 5.1 before 5.1.10, and 4.2 before 4.2.22. Internal HTTP response logging does not escape request.path, which allows remote attackers to potentially manipulate log output via crafted URLs. This may lead to log injection or forgery when logs are viewed in terminals or processed by external systems.</p> https://cve.radiocsirt.org/vuln/pysec-2025-47 https://cve.radiocsirt.org/vuln/rhsa-2025:14686 <p>setuptools: Path Traversal Vulnerability in setuptools PackageIndex django: Django Path Injection Vulnerability</p> <p>setuptools: Path Traversal Vulnerability in setuptools PackageIndex django: Django Path Injection Vulnerability</p> https://cve.radiocsirt.org/vuln/rhsa-2025:14686 https://cve.radiocsirt.org/vuln/suse-su-2025:01952-1 <p>Security update for python-Django</p> <p>Security update for python-Django</p> https://cve.radiocsirt.org/vuln/suse-su-2025:01952-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-48432 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: python-django, Ubuntu:Pro:16.04:LTS: python-django, Ubuntu:Pro:18.04:LTS: python-django, Ubuntu:Pro:20.04:LTS: python-django, Ubuntu:22.04:LTS: python-django, Ubuntu:24.04:LTS: python-django, Ubuntu:25.10: python-django</p> <p>An issue was discovered in Django 5.2 before 5.2.3, 5.1 before 5.1.11, and 4.2 before 4.2.23. Internal HTTP response logging does not escape request.path, which allows remote attackers to potentially manipulate log output via crafted URLs. This may lead to log injection or forgery when logs are viewed in terminals or processed by external systems.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: python-django, Ubuntu:Pro:16.04:LTS: python-django, Ubuntu:Pro:18.04:LTS: python-django, Ubuntu:Pro:20.04:LTS: python-django, Ubuntu:22.04:LTS: python-django, Ubuntu:24.04:LTS: python-django, Ubuntu:25.10: python-django</p> <p>An issue was discovered in Django 5.2 before 5.2.3, 5.1 before 5.1.11, and 4.2 before 4.2.23. Internal HTTP response logging does not escape request.path, which allows remote attackers to potentially manipulate log output via crafted URLs. This may lead to log injection or forgery when logs are viewed in terminals or processed by external systems.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-48432 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1245 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Django ausnutzen, um Dateien zu manipulieren.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Django ausnutzen, um Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1245