Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-1adz-zw3h-pqek
Summary
Aliases
0
alias CVE-2026-3902
1
alias GHSA-mvfq-ggxm-9mc5
Fixed_packages
0
url pkg:apk/alpine/py3-django@4.2.30-r0?arch=aarch64&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/py3-django@4.2.30-r0?arch=aarch64&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-django@4.2.30-r0%3Farch=aarch64&distroversion=v3.23&reponame=community
1
url pkg:apk/alpine/py3-django@4.2.30-r0?arch=armhf&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/py3-django@4.2.30-r0?arch=armhf&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-django@4.2.30-r0%3Farch=armhf&distroversion=v3.23&reponame=community
2
url pkg:apk/alpine/py3-django@4.2.30-r0?arch=armv7&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/py3-django@4.2.30-r0?arch=armv7&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-django@4.2.30-r0%3Farch=armv7&distroversion=v3.23&reponame=community
3
url pkg:apk/alpine/py3-django@4.2.30-r0?arch=loongarch64&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/py3-django@4.2.30-r0?arch=loongarch64&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-django@4.2.30-r0%3Farch=loongarch64&distroversion=v3.23&reponame=community
4
url pkg:apk/alpine/py3-django@4.2.30-r0?arch=x86_64&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/py3-django@4.2.30-r0?arch=x86_64&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-django@4.2.30-r0%3Farch=x86_64&distroversion=v3.23&reponame=community
5
url pkg:apk/alpine/py3-django@4.2.30-r0?arch=ppc64le&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/py3-django@4.2.30-r0?arch=ppc64le&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-django@4.2.30-r0%3Farch=ppc64le&distroversion=v3.23&reponame=community
6
url pkg:apk/alpine/py3-django@4.2.30-r0?arch=riscv64&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/py3-django@4.2.30-r0?arch=riscv64&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-django@4.2.30-r0%3Farch=riscv64&distroversion=v3.23&reponame=community
7
url pkg:apk/alpine/py3-django@4.2.30-r0?arch=s390x&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/py3-django@4.2.30-r0?arch=s390x&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-django@4.2.30-r0%3Farch=s390x&distroversion=v3.23&reponame=community
8
url pkg:apk/alpine/py3-django@4.2.30-r0?arch=x86&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/py3-django@4.2.30-r0?arch=x86&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-django@4.2.30-r0%3Farch=x86&distroversion=v3.23&reponame=community
9
url pkg:apk/alpine/py3-django@5.2.13-r0?arch=aarch64&distroversion=edge&reponame=community
purl pkg:apk/alpine/py3-django@5.2.13-r0?arch=aarch64&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-django@5.2.13-r0%3Farch=aarch64&distroversion=edge&reponame=community
10
url pkg:apk/alpine/py3-django@5.2.13-r0?arch=armhf&distroversion=edge&reponame=community
purl pkg:apk/alpine/py3-django@5.2.13-r0?arch=armhf&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-django@5.2.13-r0%3Farch=armhf&distroversion=edge&reponame=community
11
url pkg:apk/alpine/py3-django@5.2.13-r0?arch=armv7&distroversion=edge&reponame=community
purl pkg:apk/alpine/py3-django@5.2.13-r0?arch=armv7&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-django@5.2.13-r0%3Farch=armv7&distroversion=edge&reponame=community
12
url pkg:apk/alpine/py3-django@5.2.13-r0?arch=loongarch64&distroversion=edge&reponame=community
purl pkg:apk/alpine/py3-django@5.2.13-r0?arch=loongarch64&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-django@5.2.13-r0%3Farch=loongarch64&distroversion=edge&reponame=community
13
url pkg:apk/alpine/py3-django@5.2.13-r0?arch=ppc64le&distroversion=edge&reponame=community
purl pkg:apk/alpine/py3-django@5.2.13-r0?arch=ppc64le&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-django@5.2.13-r0%3Farch=ppc64le&distroversion=edge&reponame=community
14
url pkg:apk/alpine/py3-django@5.2.13-r0?arch=riscv64&distroversion=edge&reponame=community
purl pkg:apk/alpine/py3-django@5.2.13-r0?arch=riscv64&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-django@5.2.13-r0%3Farch=riscv64&distroversion=edge&reponame=community
15
url pkg:apk/alpine/py3-django@5.2.13-r0?arch=s390x&distroversion=edge&reponame=community
purl pkg:apk/alpine/py3-django@5.2.13-r0?arch=s390x&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-django@5.2.13-r0%3Farch=s390x&distroversion=edge&reponame=community
16
url pkg:apk/alpine/py3-django@5.2.13-r0?arch=x86&distroversion=edge&reponame=community
purl pkg:apk/alpine/py3-django@5.2.13-r0?arch=x86&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-django@5.2.13-r0%3Farch=x86&distroversion=edge&reponame=community
17
url pkg:apk/alpine/py3-django@5.2.13-r0?arch=x86_64&distroversion=edge&reponame=community
purl pkg:apk/alpine/py3-django@5.2.13-r0?arch=x86_64&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-django@5.2.13-r0%3Farch=x86_64&distroversion=edge&reponame=community
18
url pkg:deb/debian/python-django@3:3.2.25-0%2Bdeb12u2
purl pkg:deb/debian/python-django@3:3.2.25-0%2Bdeb12u2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:3.2.25-0%252Bdeb12u2
19
url pkg:deb/debian/python-django@3:4.2.30-1
purl pkg:deb/debian/python-django@3:4.2.30-1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:4.2.30-1
20
url pkg:deb/debian/python-django@3:4.2.30-1?distro=trixie
purl pkg:deb/debian/python-django@3:4.2.30-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:4.2.30-1%3Fdistro=trixie
21
url pkg:pypi/django@4.2.30
purl pkg:pypi/django@4.2.30
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@4.2.30
22
url pkg:pypi/django@5.2.13
purl pkg:pypi/django@5.2.13
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.2.13
23
url pkg:pypi/django@6.0.4
purl pkg:pypi/django@6.0.4
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@6.0.4
Affected_packages
0
url pkg:deb/debian/python-django@2:2.2.28-1~deb11u2?distro=trixie
purl pkg:deb/debian/python-django@2:2.2.28-1~deb11u2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1adz-zw3h-pqek
1
vulnerability VCID-46pv-pzsu-jucd
2
vulnerability VCID-ac4c-321h-tqfk
3
vulnerability VCID-ff2a-at5f-2qa8
4
vulnerability VCID-gfym-spzk-w7gk
5
vulnerability VCID-jzae-1awh-k7cm
6
vulnerability VCID-mga4-an1w-qqf9
7
vulnerability VCID-ssut-reka-r3f8
8
vulnerability VCID-xhpa-mffz-syfy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@2:2.2.28-1~deb11u2%3Fdistro=trixie
1
url pkg:deb/debian/python-django@2:2.2.28-1~deb11u2
purl pkg:deb/debian/python-django@2:2.2.28-1~deb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1adz-zw3h-pqek
1
vulnerability VCID-28g3-ubx6-ebff
2
vulnerability VCID-2tfv-rtq7-2fg9
3
vulnerability VCID-46pv-pzsu-jucd
4
vulnerability VCID-4ztz-fq98-5fh1
5
vulnerability VCID-7tph-k8q2-bue2
6
vulnerability VCID-896g-hqec-ryb9
7
vulnerability VCID-8m4b-y4va-kqgm
8
vulnerability VCID-8qu1-45n9-gyb1
9
vulnerability VCID-8xgs-8xjr-cber
10
vulnerability VCID-9abh-apwm-ebab
11
vulnerability VCID-9uzd-mmyv-mfh4
12
vulnerability VCID-ac4c-321h-tqfk
13
vulnerability VCID-c6xy-v4sf-u3hn
14
vulnerability VCID-e2jd-yd4j-kqgt
15
vulnerability VCID-e87q-1j8h-93hh
16
vulnerability VCID-ff2a-at5f-2qa8
17
vulnerability VCID-gfym-spzk-w7gk
18
vulnerability VCID-jh1e-72hp-fuf4
19
vulnerability VCID-jzae-1awh-k7cm
20
vulnerability VCID-m91a-6235-nye9
21
vulnerability VCID-mga4-an1w-qqf9
22
vulnerability VCID-msge-1mfu-7qfa
23
vulnerability VCID-mux4-uv98-hbbw
24
vulnerability VCID-q12d-kv8p-8ff7
25
vulnerability VCID-ssut-reka-r3f8
26
vulnerability VCID-u3zk-tff2-aua9
27
vulnerability VCID-ukkt-wgau-t3et
28
vulnerability VCID-v1xr-z4zu-yfb4
29
vulnerability VCID-w4pr-k5nj-ckgy
30
vulnerability VCID-wwa5-mhgu-9khz
31
vulnerability VCID-xgv1-s2ek-q3dp
32
vulnerability VCID-xhpa-mffz-syfy
33
vulnerability VCID-ysyp-h7ja-yff3
34
vulnerability VCID-z27q-zfpz-ckby
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@2:2.2.28-1~deb11u2
2
url pkg:deb/debian/python-django@3:3.2.19-1%2Bdeb12u1
purl pkg:deb/debian/python-django@3:3.2.19-1%2Bdeb12u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1adz-zw3h-pqek
1
vulnerability VCID-46pv-pzsu-jucd
2
vulnerability VCID-ac4c-321h-tqfk
3
vulnerability VCID-ff2a-at5f-2qa8
4
vulnerability VCID-gfym-spzk-w7gk
5
vulnerability VCID-jzae-1awh-k7cm
6
vulnerability VCID-mga4-an1w-qqf9
7
vulnerability VCID-ssut-reka-r3f8
8
vulnerability VCID-xhpa-mffz-syfy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:3.2.19-1%252Bdeb12u1
3
url pkg:deb/debian/python-django@3:3.2.19-1%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/python-django@3:3.2.19-1%2Bdeb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1adz-zw3h-pqek
1
vulnerability VCID-46pv-pzsu-jucd
2
vulnerability VCID-ac4c-321h-tqfk
3
vulnerability VCID-ff2a-at5f-2qa8
4
vulnerability VCID-gfym-spzk-w7gk
5
vulnerability VCID-jzae-1awh-k7cm
6
vulnerability VCID-mga4-an1w-qqf9
7
vulnerability VCID-ssut-reka-r3f8
8
vulnerability VCID-xhpa-mffz-syfy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:3.2.19-1%252Bdeb12u1%3Fdistro=trixie
4
url pkg:deb/debian/python-django@3:4.2.28-0%2Bdeb13u1?distro=trixie
purl pkg:deb/debian/python-django@3:4.2.28-0%2Bdeb13u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1adz-zw3h-pqek
1
vulnerability VCID-46pv-pzsu-jucd
2
vulnerability VCID-ac4c-321h-tqfk
3
vulnerability VCID-ff2a-at5f-2qa8
4
vulnerability VCID-gfym-spzk-w7gk
5
vulnerability VCID-ssut-reka-r3f8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:4.2.28-0%252Bdeb13u1%3Fdistro=trixie
5
url pkg:deb/debian/python-django@3:4.2.28-0%2Bdeb13u1
purl pkg:deb/debian/python-django@3:4.2.28-0%2Bdeb13u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1adz-zw3h-pqek
1
vulnerability VCID-46pv-pzsu-jucd
2
vulnerability VCID-ac4c-321h-tqfk
3
vulnerability VCID-ff2a-at5f-2qa8
4
vulnerability VCID-gfym-spzk-w7gk
5
vulnerability VCID-ssut-reka-r3f8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:4.2.28-0%252Bdeb13u1
6
url pkg:deb/debian/python-django@3:4.2.29-1?distro=trixie
purl pkg:deb/debian/python-django@3:4.2.29-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1adz-zw3h-pqek
1
vulnerability VCID-46pv-pzsu-jucd
2
vulnerability VCID-ff2a-at5f-2qa8
3
vulnerability VCID-gfym-spzk-w7gk
4
vulnerability VCID-ssut-reka-r3f8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:4.2.29-1%3Fdistro=trixie
7
url pkg:pypi/django@4.2
purl pkg:pypi/django@4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1adz-zw3h-pqek
1
vulnerability VCID-28g3-ubx6-ebff
2
vulnerability VCID-2tfv-rtq7-2fg9
3
vulnerability VCID-3sac-ah8j-pucd
4
vulnerability VCID-42x9-8c3c-bug1
5
vulnerability VCID-46pv-pzsu-jucd
6
vulnerability VCID-4ztz-fq98-5fh1
7
vulnerability VCID-78r4-85ms-63hm
8
vulnerability VCID-7tph-k8q2-bue2
9
vulnerability VCID-84mm-45p6-xkau
10
vulnerability VCID-896g-hqec-ryb9
11
vulnerability VCID-8m4b-y4va-kqgm
12
vulnerability VCID-8qu1-45n9-gyb1
13
vulnerability VCID-8xgs-8xjr-cber
14
vulnerability VCID-9abh-apwm-ebab
15
vulnerability VCID-9uzd-mmyv-mfh4
16
vulnerability VCID-ac4c-321h-tqfk
17
vulnerability VCID-c6xy-v4sf-u3hn
18
vulnerability VCID-e2jd-yd4j-kqgt
19
vulnerability VCID-e87q-1j8h-93hh
20
vulnerability VCID-e9k9-1s9f-dbgv
21
vulnerability VCID-ff2a-at5f-2qa8
22
vulnerability VCID-gfym-spzk-w7gk
23
vulnerability VCID-jh1e-72hp-fuf4
24
vulnerability VCID-jzae-1awh-k7cm
25
vulnerability VCID-m91a-6235-nye9
26
vulnerability VCID-mga4-an1w-qqf9
27
vulnerability VCID-msge-1mfu-7qfa
28
vulnerability VCID-mux4-uv98-hbbw
29
vulnerability VCID-nda7-9219-6kce
30
vulnerability VCID-q12d-kv8p-8ff7
31
vulnerability VCID-rmdp-bnjj-zuf2
32
vulnerability VCID-ssut-reka-r3f8
33
vulnerability VCID-u3zk-tff2-aua9
34
vulnerability VCID-ukkt-wgau-t3et
35
vulnerability VCID-v1xr-z4zu-yfb4
36
vulnerability VCID-vwt9-q3dt-vbfg
37
vulnerability VCID-w4pr-k5nj-ckgy
38
vulnerability VCID-wwa5-mhgu-9khz
39
vulnerability VCID-wz1q-1tjp-4qhw
40
vulnerability VCID-xgv1-s2ek-q3dp
41
vulnerability VCID-xhpa-mffz-syfy
42
vulnerability VCID-ysyp-h7ja-yff3
43
vulnerability VCID-z27q-zfpz-ckby
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@4.2
8
url pkg:pypi/django@5.2
purl pkg:pypi/django@5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1adz-zw3h-pqek
1
vulnerability VCID-28g3-ubx6-ebff
2
vulnerability VCID-2tfv-rtq7-2fg9
3
vulnerability VCID-46pv-pzsu-jucd
4
vulnerability VCID-84mm-45p6-xkau
5
vulnerability VCID-896g-hqec-ryb9
6
vulnerability VCID-8qu1-45n9-gyb1
7
vulnerability VCID-9abh-apwm-ebab
8
vulnerability VCID-9uzd-mmyv-mfh4
9
vulnerability VCID-ac4c-321h-tqfk
10
vulnerability VCID-c6xy-v4sf-u3hn
11
vulnerability VCID-e9k9-1s9f-dbgv
12
vulnerability VCID-ff2a-at5f-2qa8
13
vulnerability VCID-gfym-spzk-w7gk
14
vulnerability VCID-msge-1mfu-7qfa
15
vulnerability VCID-mux4-uv98-hbbw
16
vulnerability VCID-nda7-9219-6kce
17
vulnerability VCID-ssut-reka-r3f8
18
vulnerability VCID-ukkt-wgau-t3et
19
vulnerability VCID-vwt9-q3dt-vbfg
20
vulnerability VCID-w4pr-k5nj-ckgy
21
vulnerability VCID-ysyp-h7ja-yff3
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.2
9
url pkg:pypi/django@6.0
purl pkg:pypi/django@6.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1adz-zw3h-pqek
1
vulnerability VCID-28g3-ubx6-ebff
2
vulnerability VCID-2tfv-rtq7-2fg9
3
vulnerability VCID-46pv-pzsu-jucd
4
vulnerability VCID-8qu1-45n9-gyb1
5
vulnerability VCID-ac4c-321h-tqfk
6
vulnerability VCID-e9k9-1s9f-dbgv
7
vulnerability VCID-ff2a-at5f-2qa8
8
vulnerability VCID-gfym-spzk-w7gk
9
vulnerability VCID-msge-1mfu-7qfa
10
vulnerability VCID-nda7-9219-6kce
11
vulnerability VCID-ssut-reka-r3f8
12
vulnerability VCID-ysyp-h7ja-yff3
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@6.0
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-3902.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-3902.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-3902
reference_id
reference_type
scores
0
value 0.00036
scoring_system epss
scoring_elements 0.10717
published_at 2026-04-12T12:55:00Z
1
value 0.00036
scoring_system epss
scoring_elements 0.10749
published_at 2026-04-11T12:55:00Z
2
value 0.00036
scoring_system epss
scoring_elements 0.10735
published_at 2026-04-09T12:55:00Z
3
value 0.00036
scoring_system epss
scoring_elements 0.10679
published_at 2026-04-08T12:55:00Z
4
value 0.00047
scoring_system epss
scoring_elements 0.14521
published_at 2026-04-18T12:55:00Z
5
value 0.00047
scoring_system epss
scoring_elements 0.14623
published_at 2026-04-13T12:55:00Z
6
value 0.00047
scoring_system epss
scoring_elements 0.14514
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-3902
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3902
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3902
3
reference_url https://docs.djangoproject.com/en/dev/releases/security
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://docs.djangoproject.com/en/dev/releases/security
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://github.com/django/django
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/django/django
6
reference_url https://groups.google.com/g/django-announce
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-07T16:14:03Z/
url https://groups.google.com/g/django-announce
7
reference_url https://www.djangoproject.com/weblog/2026/apr/07/security-releases
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.djangoproject.com/weblog/2026/apr/07/security-releases
8
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1132927
reference_id 1132927
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1132927
9
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2455935
reference_id 2455935
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2455935
10
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-3902
reference_id CVE-2026-3902
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-3902
11
reference_url https://github.com/advisories/GHSA-mvfq-ggxm-9mc5
reference_id GHSA-mvfq-ggxm-9mc5
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-mvfq-ggxm-9mc5
12
reference_url https://www.djangoproject.com/weblog/2026/apr/07/security-releases/
reference_id security-releases
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-07T16:14:03Z/
url https://www.djangoproject.com/weblog/2026/apr/07/security-releases/
13
reference_url https://usn.ubuntu.com/8154-1/
reference_id USN-8154-1
reference_type
scores
url https://usn.ubuntu.com/8154-1/
Weaknesses
0
cwe_id 290
name Authentication Bypass by Spoofing
description This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.
1
cwe_id 444
name Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
description The product acts as an intermediary HTTP agent (such as a proxy or firewall) in the data flow between two entities such as a client and server, but it does not interpret malformed HTTP requests or responses in ways that are consistent with how the messages will be processed by those entities that are at the ultimate destination.
Exploits
Severity_range_score5.3 - 8.9
Exploitability0.5
Weighted_severity8.0
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-1adz-zw3h-pqek