Skip to content
OpenAdvisories
High DSA-1640-1 2 CVEs

python-django - cross site request forgery

Published Sep 20, 2008 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 4.0 python-django 0.95.1-1etch2

Vulnerabilities 2

  • High 7.5
    CVE-2008-3909

    Django cross-site request forgery (CSRF) vulnerability

    The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP POST requests and processes them after successful authentication occurs, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and delete or…

    python-django django Debian PyPI
  • Medium 5.9
    CVE-2007-5712

    Django vulnerable to Denial of Service via i18n middleware component

    The internationalization (i18n) framework in Django 0.91, 0.95, 0.95.1, and 0.96, and as used in other products such as PyLucid, when the USE_I18N option and the i18n component are enabled, allows remote attackers to cause a denial of service (memory consumpt…

    python-django django Debian PyPI