Threat Intelligence

Live CVE feed

521 threats tracked across 12 launch stacks — sourced from NVD, GHSA, CISA KEV, OSV, npm Audit, and EPSS.

Stack exposure — click to filter✕ Clear stack filter

All Critical + High Critical High Medium Low

All families Web (OWASP)AI/LLM (OWASP LLM)

Sort:Newest Severity Exploit Risk

42threats · Django · Critical + High· page 3/3

Get guardrails →

HighOSVCVE-2023-24580

2 rules

Resource exhaustion in Django

An issue was discovered in the Multipart Request Parser in Django 3.2 before 3.2.18, 4.0 before 4.0.10, and 4.1 before 4.1.7. Passing certain inputs (e.g., an excessive number of parts) to multipart forms could result in too many open files or memory exhaustion, and provided a potential vector for a denial-of-service attack.

OWASP A06LLM04 · Model DoSOWASP Web

Get guardrail →

HighOSVCVE-2023-23969

2 rules

Django contains Uncontrolled Resource Consumption via cached header

In Django 3.2 before 3.2.17, 4.0 before 4.0.9, and 4.1 before 4.1.6, the parsed values of Accept-Language headers are cached in order to avoid repetitive parsing. This leads to a potential denial-of-service vector via excessive memory usage if the raw value of Accept-Language headers is very large.

OWASP A06LLM04 · Model DoSOWASP Web

Get guardrail →

Showing 41–42 of 42 threats