Search: CVE-2026-113593

CVE-2026-113593 is a vulnerability in Django versions prior to 6.1.3, 6.0.10, and 5.2.19 where the cache middleware and cache_page decorator generate identical cache keys for requests that omit a header listed in the response's Vary header and requests that include that header with an empty value. This can allow remote attackers to access cached private data from other requests.