AIKIDO-2025-10278
django-debug-toolbar is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
10
Low Risk
This Affects:
django-debug-toolbarTL;DR
This update adds sanitization to the debug_toolbar's Request Panel, ensuring sensitive data such as GET, POST, cookies, and session values are redacted in debug output. The RequestPanel.generate_stats method now uses a new sanitize_and_sort_request_vars utility to replace the earlier unsanitized approach. Supporting helper functions (_get_sorted_keys, _process_query_dict, _process_dict) were introduced to clean and organize request data securely.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
django-debug-toolbar is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in versions 1.3.0 - 5.1.0.
How to fix this
Upgrade the django-debug-toolbar library to the patch version.
Get Secure Now
Secure your code, cloud, and runtime environments in one central system. Find and fix vulnerabilities automatically.
No credit card required | Scan results in 32secs.
SOC 2Compliant
ISO 27001Compliant