Django CVE-2026-77050, CVE-2026-84429, CVE-2026-87890, and CVE-2026-87975
Django issued security releases for CVE-2026-77050, CVE-2026-84429, CVE-2026-87890, and CVE-2026-87975.
Stories per day · 30 days
2 RSS
4 stories, newest first · one card per story
Stories tagged #web-framework
CVE-2026-93712: Dancer2 versions from 2.1.0 before 2.2.0 for Perl serve files from outside public_dir via relative path segments in the File route handler
Dancer2 before 2.2.0 can serve files outside public_dir via relative path segments.
CVE-2026-93710: Dancer2 versions from 2.0.0 before 2.2.0 for Perl dispatch a route that a dying hook refused when the exception handler halts the response in compile_hooks
Dancer2 before 2.2.0 can dispatch a route a dying hook refused when compile_hooks exception handling halts the response.
Next.js security advisory (AV26-851)
Canada's Cyber Centre warns Next.js 15.5 and 16.3 are affected by critical vulnerabilities; users should update to 15.5.24 and 16.3.3.