Django CVE-2026-77050, CVE-2026-84429, CVE-2026-87890, and CVE-2026-87975
Django issued security releases for CVE-2026-77050, CVE-2026-84429, CVE-2026-87890, and CVE-2026-87975.
Sarah Boyce announced Django security releases covering CVE-2026-77050, CVE-2026-84429, CVE-2026-87890, and CVE-2026-87975, pointing to the Django weblog and CVE records. The oss-security message is truncated and does not describe the flaws, affected versions, severity, or whether any issue is being exploited. Django is widely used, so operators should review the upstream advisory and patch, but this post alone does not establish active exploitation.
- Django announced four CVEs in an October 6, 2026 security release.
- The oss-security note links the Django weblog and official CVE records.
- The posted text does not describe impact, patches' scope, or exploitation.
- Vendors
- Django Software Foundation
- Products
- Django
- Organizations
- Django Software Foundation
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2026-77050+3 related CVEs | Unauthenticated memory-exhaustion DoS in Django translation language-code cache | 6.9 group max | — |
From the original article
Posted by Sarah Boyce on Oct 06 * Announce: https://www. djangoproject. com/weblog/2026/oct/06/security-releases/ https://www.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.