... essed denial-of-service via password hashers ¶ Django 1.4.8 imposes a 4096-byte limit on passwords in order to mitigate a denial-of-service attack through submission of bogus but extremely large passwor ... enial service passwords datetime リリースノート October fixes security related series Readdressed password hashers imposes byte limit order mitigate attack through submission bogus extremely large クイック検索 Last update: 2026年10月09日 « previous | ... ... severity "moderate" according to the Django security policy . CVE-2026-87890: Potential request forgery via spatial lookup byte values ¶ Spatial lookups accepted raster values provided as bytes without requiring them to be explicitly wrapped in GDALR ... ngo process user while preparing the lookup. This issue could be exploited by applications that passed attacker-controlled bytes directly to a spatial lookup. It was overlooked in the fix for CVE-2026-15307. To mitigate this issue, raster values prov ... ided as bytes must now be wrapped in GDALRaster before being used in spatial lookups. Byte values representing valid hexadecimal geomet ... ... severity "moderate" according to the Django security policy . CVE-2026-87890: Potential request forgery via spatial lookup byte values ¶ Spatial lookups accepted raster values provided as bytes without requiring them to be explicitly wrapped in GDALR ... ngo process user while preparing the lookup. This issue could be exploited by applications that passed attacker-controlled bytes directly to a spatial lookup. It was overlooked in the fix for CVE-2026-15307. To mitigate this issue, raster values prov ... ided as bytes must now be wrapped in GDALRaster before being used in spatial lookups. Byte values representing valid hexadecimal geomet ... ... severity "moderate" according to the Django security policy . CVE-2026-87890: Potential request forgery via spatial lookup byte values ¶ Spatial lookups accepted raster values provided as bytes without requiring them to be explicitly wrapped in GDALR ... ngo process user while preparing the lookup. This issue could be exploited by applications that passed attacker-controlled bytes directly to a spatial lookup. It was overlooked in the fix for CVE-2026-15307. To mitigate this issue, raster values prov ... ided as bytes must now be wrapped in GDALRaster before being used in spatial lookups. Byte values representing valid hexadecimal geomet ... ... severity "moderate" according to the Django security policy . CVE-2026-87890: Potential request forgery via spatial lookup byte values ¶ Spatial lookups accepted raster values provided as bytes without requiring them to be explicitly wrapped in GDALR ... ngo process user while preparing the lookup. This issue could be exploited by applications that passed attacker-controlled bytes directly to a spatial lookup. It was overlooked in the fix for CVE-2026-15307. To mitigate this issue, raster values prov ... ided as bytes must now be wrapped in GDALRaster before being used in spatial lookups. Byte values representing valid hexadecimal geomet ... ... ed denial-of-service via password hashers ¶ Django 1.5.4 imposes a 4096-byte limit on passwords in order to mitigate a denial-of-service attack through submission of bogus but extremely large passwor ... ice passwords instead corruption datetime リリースノート October fixes several series Readdressed password hashers imposes byte limit order mitigate attack クイック検索 Last update: 2026年10月09日 « previous | up | next » ... ... severity "moderate" according to the Django security policy . CVE-2026-87890: Potential request forgery via spatial lookup byte values ¶ Spatial lookups accepted raster values provided as bytes without requiring them to be explicitly wrapped in GDALR ... ngo process user while preparing the lookup. This issue could be exploited by applications that passed attacker-controlled bytes directly to a spatial lookup. It was overlooked in the fix for CVE-2026-15307. To mitigate this issue, raster values prov ... ided as bytes must now be wrapped in GDALRaster before being used in spatial lookups. Byte values representing valid hexadecimal geomet ... ... severity "moderate" according to the Django security policy . CVE-2026-87890: Potential request forgery via spatial lookup byte values ¶ Spatial lookups accepted raster values provided as bytes without requiring them to be explicitly wrapped in GDALR ... ngo process user while preparing the lookup. This issue could be exploited by applications that passed attacker-controlled bytes directly to a spatial lookup. It was overlooked in the fix for CVE-2026-15307. To mitigate this issue, raster values prov ... ided as bytes must now be wrapped in GDALRaster before being used in spatial lookups. Byte values representing valid hexadecimal geomet ... ... essed denial-of-service via password hashers ¶ Django 1.4.8 imposes a 4096-byte limit on passwords in order to mitigate a denial-of-service attack through submission of bogus but extremely large passwor ... ... ngth of the password) calculation of the corresponding hash. As of 1.4.8, Django's authentication framework imposes a 4096-byte limit on passwords and will fail authentication with any submitted password of greater length. Corrected usage of sensitiv ... 2026年10月08日