django-haystack vulnerabilities
CVEs whose affected-version data names the django-haystack package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-105315Medium· 4.7PoC⚖ disputedA vulnerability has been found in django-haystack up to 3.3.0
A vulnerability has been found in django-haystack up to 3.3.0. Affected is the function _to_python of the file haystack/backends/elasticsearch_backend.py of the component more_like_this Template Tag Handler. Such manipulation of the argu…
▾ Twilightdjango-haystack · django-haystackEPSS 0.25%via NVD
GHSA-r3hx-x5rh-p9vvHighdjango-haystack: Remote Code Execution via `eval()` in Elasticsearch Result Deserialization
django-haystack: Remote Code Execution via `eval()` in Elasticsearch Result Deserialization
▾ Twilightdjango-haystack · django-haystackvia GHSA