CWE-539

CVEs classified under CWE-539, newest first.

1 CVERSS

CVE-2026-35192Medium· 6.5⚖ disputed

An issue was discovered in 6.0 before 6.0.5 and 5.2 before 5.2.14. Response headers do not vary on cookies if a session is not modified, but `SESSION_SAVE_EVERY_REQUEST` is `True`

An issue was discovered in 6.0 before 6.0.5 and 5.2 before 5.2.14. Response headers do not vary on cookies if a session is not modified, but `SESSION_SAVE_EVERY_REQUEST` is `True`. A remote attacker can steal a user's session after that …

▾ Sunlitdjangoproject · djangoEPSS 0.54%via NVD