Executive brief
Django has a Race Condition vulnerability
Affected products
- PyPI Django
Junglewise Threat Intelligence
CVE-2026-25674: PYSEC-2026-2449 - Django has a Race Condition vulnerability
CVE-2026-25674 · Severity: low · CVSS 3.1 · Published 2026-07-13
Technologies: Django (PyPI). Vendors: PyPI.
Related threats
- Django GeoDjango unbounded recursion denial of service
- PYSEC-2026-1296 - Django vulnerable to partial directory traversal via archives
- Django DomainNameValidator header injection via newline characters
- Django GDALRaster heap buffer over-read in GIS component
- Django private data exposure in UpdateCacheMiddleware caching