What’s Vulnerable › Products

DjangoCRM django-crm vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your DjangoCRM django-crm version is affected

Latest DjangoCRM django-crm vulnerabilities

• CVE-2026-90806 — DjangoCRM django-crm Bulk Case Update bulk_views.py BulkUpdateCasesView authorization (CVSS 6.3)
• CVE-2026-71240 — DjangoCRM - Unauthenticated Open Redirect via toggle_default_sorting next_url Parameter (CVSS 4.3)
• CVE-2026-71239 — DjangoCRM - Server-Side Template Injection in Mass Mail Message Rendering (CVSS 8.1)
• CVE-2026-71238 — DjangoCRM - Hardcoded Django SECRET_KEY Enables Session and CSRF Token Forgery (CVSS 9.1)