https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-02T16:15:23.915242+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2021-45116 CVE-2021-45116 2026-10-02T16:15:24.538840+00:00

An issue was discovered in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1. Due to leveraging the Django Template Language's variable resolution logic, the dictsort template filter was potentially vulnerable to information disclosure, or an unintended method call, if passed a suitably crafted key.

 https://vulnerability.circl.lu/vuln/usn-5204-1 USN-5204-1 — python-django vulnerabilities 2026-10-02T16:15:24.538967+00:00

Affected: Ubuntu:18.04:LTS: python-django, Ubuntu:20.04:LTS: python-django

Chris Bailey discovered that Django incorrectly handled evaluating submitted passwords. A remote attacker could possibly use this issue to consume resources, resulting in a denial of service. (CVE-2021-45115)

Dennis Brinkrolf discovered that Django incorrectly handled the dictsort template filter. A remote attacker could possibly use this issue to obtain sensitive information. (CVE-2021-45116)

Dennis Brinkrolf discovered that Django incorrectly handled certain file names. A remote attacker could possibly use this issue to save files to arbitrary filesystem locations. (CVE-2021-45452)