Live data from GitHub and PyPI, updated daily.
Data last fetched: 2026-05-15
10 active CVEs reported via OSV.dev
Django Allows Arbitrary URL Generation
Django denial of service via file upload naming
Django Denial-of-service possibility in truncatechars_html and truncatewords_html template filters
SQL Injection in Django
Resource exhaustion in Django
XSS in Django
Django has Observable Timing Discrepancy
Improper Input Validation in Django
Django has Inefficient Algorithmic Complexity
Django open redirect and possible XSS attack via user-supplied numeric redirect URLs
Get SLA-backed support, security patches, and direct access to senior engineers for Django — without relying on volunteer maintainers.
Talk to an Expert →