GCVE-110-MAGEIA-2026-32

Advisory Published

Vulnetix · Advisory published February 6, 2026

Username enumeration through timing difference in mod_wsgi authentication handler. (CVE-2025-13473) Potential denial-of-service vulnerability via repeated headers when using ASGI. (CVE-2025-14550) Potential SQL injection via raster lookups on PostGIS. (CVE-2026-1207) Potential denial-of-service vulnerability in django.utils.text.Truncator HTML methods. (CVE-2026-1285) Potential SQL injection in column aliases via control characters. (CVE-2026-1287) Potential SQL injection via QuerySet.order_by and FilteredRelation. (CVE-2026-1312)

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	python-django	0 (affected), 4.1.13-1.10.mga9 (unaffected)	—

References

Updated python-django packages fix security vulnerabilities

advisory

Updated python-django packages fix security vulnerabilities

issue

Updated python-django packages fix security vulnerabilities

advisory

Browse GCVE Records

20,323 records in the GCVE database · Updated October 20, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON