USN-8232-1: python-django Ubuntu

Vulnerability summary

USN-8232-1 is a vulnerability in python-django Ubuntu with no CVSS score yet.

Timeline

1. 05-05-2026
   PublishedVulnerability first disclosed.
2. 20-05-2026
   Last modifiedVulnerability information updated.

Description

python-django vulnerabilities It was discovered that Django did not vary cached response headers on cookies when sessions were not modified while SESSION_SAVE_EVERY_REQUEST was enabled. A remote attacker could possibly use this issue to steal a user's session. (CVE-2026-35192) Kyle Agronick and Jacob Walls discovered that Django incorrectly handled ASGI requests with missing or understated Content-Length header values. A remote attacker could possibly use this issue to cause Django to use excessive resources, leading to a denial of service. (CVE-2026-5766) Ahmad Sadeddin discovered that Django UpdateCacheMiddleware incorrectly cached requests where the Vary header contained an asterisk. A remote attacker could possibly use this issue to obtain sensitive information. (CVE-2026-6907)

No weakness data has been published for this record.