Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Django could let attackers run code or steal data
published 2 months ago
Summary
The Django web framework has four security weaknesses that could allow a malicious user to execute unwanted code on your server or access sensitive information. Updating to the version released by TuxCare (5.0.1.post4+tuxcare) fixes these problems. Apply the update as soon as possible to keep your applications safe.
What to do
- Update django software foundation django to version 5.0.1.post4+tuxcare.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:PyPI | django software foundation | django |
>= 5.0.1, < 5.0.1.post4+tuxcare Fix: upgrade to 5.0.1.post4+tuxcare
|
Original advisory text
TuxCare security update for django (4 CVEs)
TuxCare rebuilt django to address 4 CVEs. Fixed in 5.0.1.post4+tuxcare.
Timeline
Published21 Aug 2026
Updated15 Oct 2026
First seen15 Oct 2026
Sources
CLSA-2026-1787305516 · OSV
Track software like this
Free during beta