https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-07T19:13:02.155364+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2022-36359 CVE-2022-36359 2026-10-07T19:13:02.479580+00:00

An issue was discovered in the HTTP FileResponse class in Django 3.2 before 3.2.15 and 4.0 before 4.0.7. An application is vulnerable to a reflected file download (RFD) attack that sets the Content-Disposition header of a FileResponse when the filename is derived from user-supplied input.

 https://vulnerability.circl.lu/vuln/usn-5549-1 USN-5549-1 — python-django vulnerability 2026-10-07T19:13:02.479679+00:00

Affected: Ubuntu:20.04:LTS: python-django, Ubuntu:22.04:LTS: python-django

It was discovered that Django incorrectly handled certain FileResponse. An attacker could possibly use this issue to expose sensitive information or gain access over user machine.