VYPR

Django

by Red Hat

CVEs (1)

  • CVE-2026-71461MedSep 23, 2026
    risk 0.28cvss 4.3epss

    HostList.list() catches bare Exception and returns str(e) verbatim. Via host_filter, any authenticated user triggers Django FieldError (leaking complete Host model relation graph including internal reverse accessors) or PostgreSQL …