A vulnerability has been found in djangoproject Django up to 5.2.13/6.0.4 and classified as problematic. Affected by this issue is some unknown functionality of the component Response Header Handler. The manipulation leads to use of persistent cookies containing sensitive information.

This vulnerability is referenced as CVE-2026-35192. Remote exploitation of the attack is possible. No exploit is available.

The affected component should be upgraded.