Cross-site request forgery in Django

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2011-0696 · ADVISORY
• django/django commit 408c5c8 · WEB
• django/django commit 818e703 · WEB
• bugzilla.redhat.com/show_bug.cgi · WEB
• GitHub Advisory GHSA-5j2h-h5hg-3wf8 · ADVISORY
• django/django · PACKAGE
• pypa/advisory-database · WEB
• pypa/advisory-database · WEB
• lists.fedoraproject.org/pipermail/package-announce/2011-February/054207.html · WEB
• lists.fedoraproject.org/pipermail/package-announce/2011-February/054208.html · WEB
• openwall.com/lists/oss-security/2011/02/09/6 · WEB

django のその他の脆弱性

• CVE-2026-15830中 5.3An issue was discovered in Django 6.0 before 6.0.9 and 5.2 before 5.2.18. GeoDjango's `django.contrib.gis.geos.GEOSGeometry` is subject to a…
• CVE-2026-15307高 8.8An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. GeoDjango spatial lookups optimistically parse the right-hand-side…
• CVE-2026-53878中 6.1An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16. `DomainNameValidator` does not prohibit newlines in domain names (…
• CVE-2026-53877中 4.8An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16. `django.contrib.gis.gdal.GDALRaster` over-reads its in-memory buff…
• CVE-2026-48588中 5.3An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16. `UpdateCacheMiddleware` and the `cache_page()` decorator cache res…