... authentication via mod_wsgi allowed remote attackers to enumerate users via a timing attack. This issue has severity "low" according to the Django security policy . CVE-2025-14550: Potential denial-of-service vulnerability via repeated headers when using ... rs, which produced super-linear computation resulting in service degradation or outage. This issue has severity "moderate" according to the Django security policy . CVE-2026-1207: Potential SQL injection via raster lookups on PostGIS ¶ Raster lookups on G ... ed as a band index. As a reminder, all untrusted user input should be validated before use. This issue has severity "high" according to the Django security policy . CVE-2026-1285: Potential denial-of-service vulnerability in django.utils.text.Truncator HT ... ... authentication via mod_wsgi allowed remote attackers to enumerate users via a timing attack. This issue has severity "low" according to the Django security policy . CVE-2025-14550: Potential denial-of-service vulnerability via repeated headers when using ... rs, which produced super-linear computation resulting in service degradation or outage. This issue has severity "moderate" according to the Django security policy . CVE-2026-1207: Potential SQL injection via raster lookups on PostGIS ¶ Raster lookups on G ... ed as a band index. As a reminder, all untrusted user input should be validated before use. This issue has severity "high" according to the Django security policy . CVE-2026-1285: Potential denial-of-service vulnerability in django.utils.text.Truncator HT ... ... authentication via mod_wsgi allowed remote attackers to enumerate users via a timing attack. This issue has severity "low" according to the Django security policy . CVE-2025-14550: Potential denial-of-service vulnerability via repeated headers when using ... rs, which produced super-linear computation resulting in service degradation or outage. This issue has severity "moderate" according to the Django security policy . CVE-2026-1207: Potential SQL injection via raster lookups on PostGIS ¶ Raster lookups on G ... ed as a band index. As a reminder, all untrusted user input should be validated before use. This issue has severity "high" according to the Django security policy . CVE-2026-1285: Potential denial-of-service vulnerability in django.utils.text.Truncator HT ... ... authentication via mod_wsgi allowed remote attackers to enumerate users via a timing attack. This issue has severity "low" according to the Django security policy . CVE-2025-14550: Potential denial-of-service vulnerability via repeated headers when using ... rs, which produced super-linear computation resulting in service degradation or outage. This issue has severity "moderate" according to the Django security policy . CVE-2026-1207: Potential SQL injection via raster lookups on PostGIS ¶ Raster lookups on G ... ed as a band index. As a reminder, all untrusted user input should be validated before use. This issue has severity "high" according to the Django security policy . CVE-2026-1285: Potential denial-of-service vulnerability in django.utils.text.Truncator HT ... ... authentication via mod_wsgi allowed remote attackers to enumerate users via a timing attack. This issue has severity "low" according to the Django security policy . CVE-2025-14550: Potential denial-of-service vulnerability via repeated headers when using ... rs, which produced super-linear computation resulting in service degradation or outage. This issue has severity "moderate" according to the Django security policy . CVE-2026-1207: Potential SQL injection via raster lookups on PostGIS ¶ Raster lookups on G ... ed as a band index. As a reminder, all untrusted user input should be validated before use. This issue has severity "high" according to the Django security policy . CVE-2026-1285: Potential denial-of-service vulnerability in django.utils.text.Truncator HT ... ... authentication via mod_wsgi allowed remote attackers to enumerate users via a timing attack. This issue has severity "low" according to the Django security policy . CVE-2025-14550: Potential denial-of-service vulnerability via repeated headers when using ... rs, which produced super-linear computation resulting in service degradation or outage. This issue has severity "moderate" according to the Django security policy . CVE-2026-1207: Potential SQL injection via raster lookups on PostGIS ¶ Raster lookups on G ... ed as a band index. As a reminder, all untrusted user input should be validated before use. This issue has severity "high" according to the Django security policy . CVE-2026-1285: Potential denial-of-service vulnerability in django.utils.text.Truncator HT ... ... ow ignored by ASGIRequest , matching the behavior of Daphne , the reference server for ASGI. This issue has severity "low" according to the Django security policy . CVE-2026-4277: Privilege abuse in GenericInlineModelAdmin ¶ Add permissions on inline mode ... instances were not validated on submission of forged POST data in GenericInlineModelAdmin . This issue has severity "low" according to the Django security policy . CVE-2026-4292: Privilege abuse in ModelAdmin.list_editable ¶ Admin changelist forms using ... list_editable incorrectly allowed new instances to be created via forged POST data. This issue has severity "low" according to the Django security policy . CVE-2026-33033: Potential denial-of-service vulnerability in MultiPartParser via base64-en ... ... ow ignored by ASGIRequest , matching the behavior of Daphne , the reference server for ASGI. This issue has severity "low" according to the Django security policy . CVE-2026-4277: Privilege abuse in GenericInlineModelAdmin ¶ Add permissions on inline mode ... instances were not validated on submission of forged POST data in GenericInlineModelAdmin . This issue has severity "low" according to the Django security policy . CVE-2026-4292: Privilege abuse in ModelAdmin.list_editable ¶ Admin changelist forms using ... list_editable incorrectly allowed new instances to be created via forged POST data. This issue has severity "low" according to the Django security policy . CVE-2026-33033: Potential denial-of-service vulnerability in MultiPartParser via base64-en ... ... ow ignored by ASGIRequest , matching the behavior of Daphne , the reference server for ASGI. This issue has severity "low" according to the Django security policy . CVE-2026-4277: Privilege abuse in GenericInlineModelAdmin ¶ Add permissions on inline mode ... instances were not validated on submission of forged POST data in GenericInlineModelAdmin . This issue has severity "low" according to the Django security policy . CVE-2026-4292: Privilege abuse in ModelAdmin.list_editable ¶ Admin changelist forms using ... list_editable incorrectly allowed new instances to be created via forged POST data. This issue has severity "low" according to the Django security policy . CVE-2026-33033: Potential denial-of-service vulnerability in MultiPartParser via base64-en ... ... ow ignored by ASGIRequest , matching the behavior of Daphne , the reference server for ASGI. This issue has severity "low" according to the Django security policy . CVE-2026-4277: Privilege abuse in GenericInlineModelAdmin ¶ Add permissions on inline mode ... instances were not validated on submission of forged POST data in GenericInlineModelAdmin . This issue has severity "low" according to the Django security policy . CVE-2026-4292: Privilege abuse in ModelAdmin.list_editable ¶ Admin changelist forms using ... list_editable incorrectly allowed new instances to be created via forged POST data. This issue has severity "low" according to the Django security policy . CVE-2026-33033: Potential denial-of-service vulnerability in MultiPartParser via base64-en ... 2026年10月08日