tag
Django
Critical
XSpeeder SXZOS Pre-Auth eval() Remote Code Execution (CVE-2025-54322)
CVE-2025-54322·
XSpeeder SXZOS firmware (SD-WAN devices, routers, edge networking equipment)
unpatched
Critical
Django QuerySet/Q Object SQL Injection via `_connector` Kwarg (CVE-2025-64459)
CVE-2025-64459·
Django ORM (QuerySet.filter() / Q object construction)
patched
Medium
Tandoor Recipes Authenticated Local File Disclosure via Recipe Import (CVE-2026-25964)
CVE-2026-25964 (GHSA-6485-jr28-52xx)·
Tandoor Recipes (self-hosted recipe manager, Django-based)
patched
Medium
Django MultiPartParser Base64 Whitespace CPU Amplification DoS — CVE-2026-33033
CVE-2026-33033·
Django (django.http.multipartparser.MultiPartParser)
patched
High
Django GIS RasterField SQL Injection (CVE-2026-1207)
CVE-2026-1207·
Django django.contrib.gis (GeoDjango) RasterField queries
unpatched