https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-10T18:02:39.794401+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2024-45231 CVE-2024-45231 2026-10-10T18:02:40.828259+00:00

Affected: djangoproject django

An issue was discovered in Django v5.1.1, v5.0.9, and v4.2.16. The django.contrib.auth.forms.PasswordResetForm class, when used in a view implementing password reset flows, allows remote attackers to enumerate user e-mail addresses by sending password reset requests and observing the outcome (only when e-mail sending is consistently failing).

 https://vulnerability.circl.lu/vuln/usn-6987-1 USN-6987-1 — python-django vulnerabilities 2026-10-10T18:02:40.828395+00:00

Affected: Ubuntu:Pro:18.04:LTS: python-django, Ubuntu:20.04:LTS: python-django, Ubuntu:22.04:LTS: python-django, Ubuntu:24.04:LTS: python-django

It was discovered that Django incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service. (CVE-2024-45230)

It was discovered that Django incorrectly handled certain email sending failures. A remote attacker could possibly use this issue to enumerate user emails by issuing password reset requests and observing the outcomes. (CVE-2024-45231)