d
django software foundation
Security Risk Profile
22
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 49 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from September 9, 2010 to present
49
Total CVEs
3
Critical+High
0
Exploited
2
Unpatched
Threat Assessment
Avg CVSS
4.6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
2
Critical/High
Risk Level
22/100
low
Severity Distribution
Critical
0High
3Medium
6Low
2Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
SQL Injection
3
2
CSRF
2
3
XSS
1
Most Affected Products
1. Django Software Foundation Django54
2. djangoproject Django7
3. pip/Django3
Recent Vulnerabilities
See more →EOL-django-6.1
unknown
Aug 5, 2026
https://seclists.org/oss-sec/2026/q3/406
unknown
Django CVE-2026-15307, CVE-2026-15337, CVE-2026-15830, and CVE-2026-15920
Aug 4, 2026🔧 No Patch
CVE-2026-35193
CVSS 2.3low
Potential exposure of private data via missing Vary: Authorization in UpdateCacheMiddleware
Jun 3, 2026🔧 No Patch
CVE-2026-7666
CVSS 2.3low
Potential unencrypted email transmission via STARTTLS in the SMTP backend
Jun 3, 2026🔧 No Patch
EOL-django-6.0
unknown
Dec 3, 2025
REDHAT-BUG-2392990
CVSS 7.0high
Sep 3, 2025🔧 No Patch
CVE-2025-57833
CVSS 8.1high
Django: Potential SQL injection in Filtedlation column aliases
Sep 3, 2025
EOL-django-5.2
unknown
Apr 2, 2025
REDHAT-BUG-2348993
CVSS 4.0medium
Feb 28, 2025🔧 No Patch
https://seclists.org/oss-sec/2024/q4/144
unknown
Django CVE-2024-53907 and CVE-2024-53908
Dec 4, 2024🔧 No Patch
Monitor django software foundation in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.