https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 12:38:30 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-00766 bdu:2020-00766 https://cve.radiocsirt.org/vuln/bdu:2020-00766 https://cve.radiocsirt.org/vuln/cnvd-2019-16528 cnvd-2019-16528 https://cve.radiocsirt.org/vuln/cnvd-2019-16528 https://cve.radiocsirt.org/vuln/euvd-2026-54930 EUVD-2026-54930 https://cve.radiocsirt.org/vuln/euvd-2026-54930 https://cve.radiocsirt.org/vuln/fkie_cve-2019-12308 <p>An issue was discovered in Django 1.11 before 1.11.21, 2.1 before 2.1.9, and 2.2 before 2.2.2. The clickable Current URL value displayed by the AdminURLFieldWidget displays the provided value without validating it as a safe URL. Thus, an unvalidated value stored in the database, or a value provided as a URL query parameter payload, could result in an clickable JavaScript link.</p> <p>An issue was discovered in Django 1.11 before 1.11.21, 2.1 before 2.1.9, and 2.2 before 2.2.2. The clickable Current URL value displayed by the AdminURLFieldWidget displays the provided value without validating it as a safe URL. Thus, an unvalidated value stored in the database, or a value provided as a URL query parameter payload, could result in an clickable JavaScript link.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-12308 https://cve.radiocsirt.org/vuln/ghsa-7rp2-fm2h-wchj <p><strong>Affected:</strong> PyPI: Django</p> <p>An issue was discovered in Django 1.11 before 1.11.21, 2.1 before 2.1.9, and 2.2 before 2.2.2. The clickable Current URL value displayed by the AdminURLFieldWidget displays the provided value without validating it as a safe URL. Thus, an unvalidated value stored in the database, or a value provided as a URL query parameter payload, could result in an clickable JavaScript link.</p> <p><strong>Affected:</strong> PyPI: Django</p> <p>An issue was discovered in Django 1.11 before 1.11.21, 2.1 before 2.1.9, and 2.2 before 2.2.2. The clickable Current URL value displayed by the AdminURLFieldWidget displays the provided value without validating it as a safe URL. Thus, an unvalidated value stored in the database, or a value provided as a URL query parameter payload, could result in an clickable JavaScript link.</p> https://cve.radiocsirt.org/vuln/ghsa-7rp2-fm2h-wchj https://cve.radiocsirt.org/vuln/gsd-2019-12308 gsd-2019-12308 https://cve.radiocsirt.org/vuln/gsd-2019-12308 https://cve.radiocsirt.org/vuln/opensuse-su-2019:1839-1 <p>Security update for python-Django</p> <p>Security update for python-Django</p> https://cve.radiocsirt.org/vuln/opensuse-su-2019:1839-1 https://cve.radiocsirt.org/vuln/pysec-2019-79 <p><strong>Affected:</strong> PyPI: django</p> <p>An issue was discovered in Django 1.11 before 1.11.21, 2.1 before 2.1.9, and 2.2 before 2.2.2. The clickable Current URL value displayed by the AdminURLFieldWidget displays the provided value without validating it as a safe URL. Thus, an unvalidated value stored in the database, or a value provided as a URL query parameter payload, could result in an clickable JavaScript link.</p> <p><strong>Affected:</strong> PyPI: django</p> <p>An issue was discovered in Django 1.11 before 1.11.21, 2.1 before 2.1.9, and 2.2 before 2.2.2. The clickable Current URL value displayed by the AdminURLFieldWidget displays the provided value without validating it as a safe URL. Thus, an unvalidated value stored in the database, or a value provided as a URL query parameter payload, could result in an clickable JavaScript link.</p> https://cve.radiocsirt.org/vuln/pysec-2019-79 https://cve.radiocsirt.org/vuln/suse-su-2019:2034-1 <p>Security update for python-Django1</p> <p>Security update for python-Django1</p> https://cve.radiocsirt.org/vuln/suse-su-2019:2034-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-12308 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: python-django, Ubuntu:Pro:16.04:LTS: python-django, Ubuntu:18.04:LTS: python-django</p> <p>An issue was discovered in Django 1.11 before 1.11.21, 2.1 before 2.1.9, and 2.2 before 2.2.2. The clickable Current URL value displayed by the AdminURLFieldWidget displays the provided value without validating it as a safe URL. Thus, an unvalidated value stored in the database, or a value provided as a URL query parameter payload, could result in an clickable JavaScript link.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: python-django, Ubuntu:Pro:16.04:LTS: python-django, Ubuntu:18.04:LTS: python-django</p> <p>An issue was discovered in Django 1.11 before 1.11.21, 2.1 before 2.1.9, and 2.2 before 2.2.2. The clickable Current URL value displayed by the AdminURLFieldWidget displays the provided value without validating it as a safe URL. Thus, an unvalidated value stored in the database, or a value provided as a URL query parameter payload, could result in an clickable JavaScript link.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-12308