Skip to main content

3 docs tagged with "django"

View all tags

CRE-2025-0031

Django applications may return a \"DisallowedHost\" error when receiving requests with an unrecognized or missing Host header. This typically occurs in production environments where reverse proxies, load balancers, or external clients send requests using an unexpected domain or IP address. Django blocks these requests unless the domain is explicitly listed in `ALLOWED_HOSTS`.

CRE-2025-0035

Applications using psycopg2 with OpenTelemetry instrumentation or threading may fail with SSL\-related errors such as \"decryption failed or bad record mac\". This often occurs when a database connection is created before a fork or from an unsafe thread context, causing the SSL state to become invalid.

CRE-2025-0042

\- Applications using Django with PostgreSQL and psycopg2 may encounter `deadlock detected` errors under concurrent write\-heavy workloads.