Summary
Cached public pages can expose user sessions. This medium-severity finding affects Django.
Disclosure timeline
- Public disclosure
Credits
Cantina · Agent-discovered and human-verified
Vulnerability disclosure
Cached public pages can expose user sessions
CVE-2026-35192
- Affected product
- Django
- Severity
- Medium
- Weakness
- CWE-539
- Disclosed