Researchers
Back
Chris Whyland
#48432
of 60,391
6.3
Total CVSS
Vulnerabilities
·
1
PT-2026-56195
2026-07-07
6.3
CVE-2026-48588
Django
Django
`UpdateCacheMiddleware` and the `cache page()` decorator cache responses that vary on cookies when the incoming request contains unrelated cookies. This behavior allows remote attackers to access private data stored in the shared cache.