Product by Djangoproject
Django
161 known vulnerabilities in Django (Djangoproject), 0 of them actively exploited (CISA KEV).
Key figures
161
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
14
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2022-34265 | Django: SQL Injection | 9.8 | |
| High | CVE-2023-24580 | Django: Denial of Service | 7.5 | |
| High | CVE-2023-23969 | Django: Denial of Service | 7.5 | |
| Critical | CVE-2025-64459 | Potential SQL injection via _connector keyword argument in QuerySet and Q objects | 9.1 | |
| Critical | CVE-2020-7471 | Django: SQL Injection | 9.8 | |
| Critical | CVE-2019-19844 | Django: security vulnerability | 9.8 | |
| Critical | CVE-2019-14234 | Django: SQL Injection | 9.8 | |
| Critical | CVE-2021-35042 | Django: SQL Injection | 9.8 | |
| Critical | CVE-2022-28346 | Django: SQL Injection | 9.8 | |
| High | CVE-2025-57833 | Django: SQL Injection | 7.1 | |
| High | CVE-2024-45230 | Django: Denial of Service | 7.5 | |
| High | CVE-2020-9402 | Django: SQL Injection | 8.8 | |
| High | CVE-2024-39614 | Django: Denial of Service | 7.5 | |
| High | CVE-2023-46695 | Django: Denial of Service | 7.5 | |
| High | CVE-2023-36053 | Django: Denial of Service | 7.5 | |
| Critical | CVE-2016-9013 | Django: Hard-coded Credentials | 9.8 | |
| High | CVE-2022-23833 | Django: Infinite Loop | 7.5 | |
| Medium | CVE-2026-1207 | Potential SQL injection via raster lookups on PostGIS | 5.4 | |
| Critical | CVE-2023-31047 | Django: security vulnerability | 9.8 | |
| Critical | CVE-2022-28347 | Django: SQL Injection | 9.8 | |
| High | CVE-2016-9014 | Django: security vulnerability | 8.1 | |
| Medium | CVE-2025-32873 | Django: Allocation of Resources Without Limits or Throttling | 5.3 | |
| Medium | CVE-2021-23336 | Web Cache Poisoning | 5.9 | |
| Medium | CVE-2018-14574 | Django: Open Redirect | 6.1 | |
| Medium | CVE-2017-12794 | Django: Cross-Site Scripting (XSS) | 6.1 |