浏览报告
12 份报告 · 本页赏金 $0 · 清除筛选
`Vary` cache-key conflation of absent and empty request fields其他弱点Django低危—2026-11-03ASGIRequest header concatenation quadratic CPU DoS on Django via repeated headers leads to worker exhaustion拒绝服务Django未评级—2026-02-09User enumeration via timing attack in Django mod_wsgi authentication backend leads to account discovery身份认证Django未评级—2026-02-04Potential SQL Injection when annotating FilteredRelation on PostgreSQLSQL 注入Django中危—2025-12-02SQL Injection in Django ORM via Unvalidated `_connector` in Q ObjectsSQL 注入Django高危—2025-11-06Path traversal via archive.extract - CVE 2021-3281 incomplete patch路径遍历Django低危—2025-11-21SQL Injection when using FilteredRelationSQL 注入Django高危—2025-09-15SQL injection in JSONField KeyTransformSQL 注入Django中危—2025-09-12Deserialization of potentially malicious data to RCE代码执行Django中危—2022-01-14Jenkins Unauthenticated RCE on https://djangoci.com/代码执行Django高危—2019-05-16Email Spoofing Possible on djangoproject.com Email Domain业务逻辑Django低危—2018-10-05CSRF protection bypass on any Django powered site via Google Analytics业务逻辑Django未评级—2016-09-26