D
Vendor security profile
djangoproject
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs22
Critical0
CISA KEV0
Public exploit1
Patch rate%91
Avg. CVSS5.4
12-month vulnerability rate
0
0
0
3
1
0
0
7
3
4
0
4
CVE KEV
CVE severity distribution
22toplam CVE
High3 (14%)
Medium17 (77%)
Low2 (9%)
Patch and exploitation view
%91
Verified patch
%0
CISA KEV
%5
Public exploit
16Patch available
4Partial
0Workaround
0Vendor: no patch
2Unknown
Latest vulnerabilities
4.3
CVE-2026-87975
Privilege abuse in model formsets with editable primary keys
D
Patch verifiedEPSS %0
5.3
CVE-2026-87890
Potential request forgery via spatial lookup byte values
D
Patch verifiedEPSS %0
5.3
CVE-2026-84429
Potential denial-of-service vulnerability in HTTP header parsing
D
Patch verifiedEPSS %0
5.3
CVE-2026-77050
Potential denial-of-service vulnerability in get_supported_language_variant()
D
Patch verifiedEPSS %0
6.1
CVE-2026-15920
Potential cross-site scripting via URLField values in the admin
D
Partial patchEPSS %0
5.3
CVE-2026-15830
Potential denial-of-service vulnerability via nested geometry collections
D
Partial patchEPSS %1
5.3
CVE-2026-15337
Potential denial-of-service vulnerability in check_for_language()
D
Partial patchEPSS %1
8.8
CVE-2026-15307
Server-side file-write and request forgery via spatial lookups
D
Partial patchEPSS %1
6.1
CVE-2026-53878
Vulnerability in Django
D
Patch verifiedEPSS %0
4.8
CVE-2026-53877
Vulnerability in Django
D
Patch verifiedEPSS %1