... Privilege abuse in GenericInlineModelAdmin ¶ Add permissions on inline model instances were not validated on submission of forged POST data in GenericInlineModelAdmin . This issue has severity "low" according to the Django security policy . CVE-2026-42 ... ModelAdmin.list_editable ¶ Admin changelist forms using list_editable incorrectly allowed new instances to be created via forged POST data. This issue has severity "low" according to the Django security policy . CVE-2026-33033: Potential denial-of-ser ... ce memory moderate ASGIRequest hyphens even proxies headers named server Privilege abuse GenericInlineModelAdmin instances forged list editable using クイック検索 Last update: 2026年10月09日 « previous | up | next » ... ... Privilege abuse in GenericInlineModelAdmin ¶ Add permissions on inline model instances were not validated on submission of forged POST data in GenericInlineModelAdmin . This issue has severity "low" according to the Django security policy . CVE-2026-42 ... ModelAdmin.list_editable ¶ Admin changelist forms using list_editable incorrectly allowed new instances to be created via forged POST data. This issue has severity "low" according to the Django security policy . CVE-2026-33033: Potential denial-of-ser ... ce memory moderate ASGIRequest hyphens even proxies headers named server Privilege abuse GenericInlineModelAdmin instances forged list editable using クイック検索 Last update: 2026年10月09日 « previous | up | next » ... ... Privilege abuse in GenericInlineModelAdmin ¶ Add permissions on inline model instances were not validated on submission of forged POST data in GenericInlineModelAdmin . This issue has severity "low" according to the Django security policy . CVE-2026-42 ... ModelAdmin.list_editable ¶ Admin changelist forms using list_editable incorrectly allowed new instances to be created via forged POST data. This issue has severity "low" according to the Django security policy . CVE-2026-33033: Potential denial-of-ser ... xed moderate ASGIRequest hyphens even proxies headers named server Privilege abuse GenericInlineModelAdmin model instances forged list クイック検索 Last update: 2026年10月09日 « previous | up | next » ... ... Privilege abuse in GenericInlineModelAdmin ¶ Add permissions on inline model instances were not validated on submission of forged POST data in GenericInlineModelAdmin . This issue has severity "low" according to the Django security policy . CVE-2026-42 ... ModelAdmin.list_editable ¶ Admin changelist forms using list_editable incorrectly allowed new instances to be created via forged POST data. This issue has severity "low" according to the Django security policy . CVE-2026-33033: Potential denial-of-ser ... ... Privilege abuse in GenericInlineModelAdmin ¶ Add permissions on inline model instances were not validated on submission of forged POST data in GenericInlineModelAdmin . This issue has severity "low" according to the Django security policy . CVE-2026-42 ... ModelAdmin.list_editable ¶ Admin changelist forms using list_editable incorrectly allowed new instances to be created via forged POST data. This issue has severity "low" according to the Django security policy . CVE-2026-33033: Potential denial-of-ser ... ... Privilege abuse in GenericInlineModelAdmin ¶ Add permissions on inline model instances were not validated on submission of forged POST data in GenericInlineModelAdmin . This issue has severity "low" according to the Django security policy . CVE-2026-42 ... ModelAdmin.list_editable ¶ Admin changelist forms using list_editable incorrectly allowed new instances to be created via forged POST data. This issue has severity "low" according to the Django security policy . CVE-2026-33033: Potential denial-of-ser ... ... ins and redirects which can allow an attacker to provide custom HTTP headers on a request to any website. This can allow a forged request to appear to be an AJAX request, thereby defeating CSRF protection which trusts the same-origin nature of AJAX req ... ... ins and redirects which can allow an attacker to provide custom HTTP headers on a request to any website. This can allow a forged request to appear to be an AJAX request, thereby defeating CSRF protection which trusts the same-origin nature of AJAX req ... ... policy . CVE-2026-87975: Privilege abuse in model formsets with editable primary keys ¶ Model formsets incorrectly allowed forged POST data to either delete instances outside the limiting queryset or create instances via edit-only formsets when the mod ... ... policy . CVE-2026-87975: Privilege abuse in model formsets with editable primary keys ¶ Model formsets incorrectly allowed forged POST data to either delete instances outside the limiting queryset or create instances via edit-only formsets when the mod ... 2026年10月08日