https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-11T11:06:08.943351+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2022-22818 CVE-2022-22818 2026-10-11T11:06:08.954141+00:00

The {% debug %} template tag in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2 does not properly encode the current context. This may lead to XSS.

 https://vulnerability.circl.lu/vuln/usn-5269-1 USN-5269-1 — python-django vulnerabilities 2026-10-11T11:06:08.954247+00:00

Affected: Ubuntu:18.04:LTS: python-django, Ubuntu:20.04:LTS: python-django

Keryn Knight discovered that Django incorrectly handled certain template tags. A remote attacker could possibly use this issue to perform a cross-site scripting attack. (CVE-2022-22818)

Alan Ryan discovered that Django incorrectly handled file uploads. A remote attacker could possibly use this issue to cause Django to hang, resulting in a denial of service. (CVE-2022-23833)