Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Web Framework

Django

Django is a high-level Python Web framework that encourages rapid development and clean pragmatic design. Built by experienced developers it takes care of much of the hassle of Web development so you can focus on writing your app without needing to reinvent the wheel. Itrsquos free and open source.

Official Site:

https://www.djangoproject.com/

Severity Summary:

Critical: 15 High: 50 Medium: 85 Low: 6
Reference
Title
Severity
CVE-2026-6873
Django Improper Verification of Cryptographic Signature Vulnerability
Medium
CVE-2026-8404
Django Improper Handling of Case Sensitivity Vulnerability
Medium
CVE-2026-5766
Django Improper Handling of Length Parameter Inconsistency Vulnerability
Medium
CVE-2013-6044
Django Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2026-6907
Django Use of Cache Containing Sensitive Information Vulnerability
Medium
CVE-2026-33033
Django Inefficient Algorithmic Complexity Vulnerability
Medium
CVE-2020-13596
Django Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2020-13254
Django Improper Certificate Validation Vulnerability
Medium
CVE-2019-19118
Django Incorrect Default Permissions Vulnerability
Medium
CVE-2025-13473
Django Observable Timing Discrepancy Vulnerability
Medium
CVE-2026-1207
Django Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
Medium
CVE-2026-1287
Django Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
Medium
CVE-2026-1312
Django Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
Medium
CVE-2025-13372
Django Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
Medium
CVE-2016-6186
Django Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2021-32052
Django Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2011-4139
Django Improper Input Validation Vulnerability
Medium
CVE-2010-3082
Django Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2010-4534
Django Permissions Privileges and Access Controls Vulnerability
Medium
CVE-2010-4535
Django Improper Input Validation Vulnerability
Medium
CVE-2011-0696
Django Cross-Site Request Forgery (CSRF) Vulnerability
Medium
CVE-2011-0697
Django Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2014-0473
Django Permissions Privileges and Access Controls Vulnerability
Medium
CVE-2011-4136
Django Improper Input Validation Vulnerability
Medium
CVE-2011-4137
Django Resource Management Errors Vulnerability
Medium
CVE-2011-4138
Django Improper Input Validation Vulnerability
Medium
CVE-2011-4140
Django Cross-Site Request Forgery (CSRF) Vulnerability
Medium
CVE-2021-28658
Django Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability
Medium
CVE-2012-3442
Django Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2012-3443
Django Improper Input Validation Vulnerability
Medium