By weakness (CWE)

CWE-144: related vulnerabilities

CVEs classified under CWE-144. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

1 published vulnerability

• CVE-2026-53878MEDIUM 6.1

  Django's domain name validator accepts newlines in domain values, which can lead to HTTP header injection when those values are included in responses. While Django's own `HttpResponse` class protects against this, applications that validate domains with `DomainNameValidator` and then use those values directly in HTTP headers could inadvertently inject malicious headers. The issue affects Django 6.0 before version 6.0.7 and 5.2 before version 5.2.16, though older unsupported versions may also be vulnerable.