Vulnerability GHSA-p3fp-8748-vqfq

Medium Risk

1 year ago

Django Vulnerable to Allocation of Resources Without Limits or Throttling

4.2 - 4.2.19 and 5.0 - 5.0.12 and 5.1 - 5.1.6

Summary

Django Vulnerable to Allocation of Resources Without Limits or Throttling

Details

An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap() method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings.

References

Related Vulnerabilities

Other vulnerabilities affecting the same packages

High Risk

1 month ago

Django GeoDjango spatial lookups allow file writes and outbound requests through GDAL raster parsing

1.0.1 - 5.2.16 and 6.0a1 - 6.0.7 PYSEC-2026-4035

Medium Risk

3 months ago

Django GeoDjango vulnerable to denial of service through deeply nested geometry collections

1.0.1 - 5.2.16 and 6.0a1 - 6.0.7 and 6.1a1 - 6.1 GHSA-q238-5cxm-5c9h

High Risk

3 months ago

Django GeoDjango spatial lookups allow file writes and outbound requests through GDAL raster parsing

1.0.1 - 5.2.16 and 6.0a1 - 6.0.7 GHSA-wvqv-fj8w-qmhm

Unknown

3 months ago

No summary available

1.0.1 - 5.2.16 and 6.0 - 6.0.7 PYSEC-2026-3717

High Risk

3 months ago

Django vulnerable to Uncontrolled Resource Consumption

4.2 - 4.2.28 and 5.2 - 5.2.11 and 6.0 - 6.0.2 PYSEC-2026-2448

View all vulnerabilities for these packages

Impacted packages

django

Timeline

Published

1 year ago

Fixed (5.1.7)

1 year ago

Fixed (5.0.13)

1 year ago

Fixed (4.2.20)

1 year ago

Last Modified

1 hour ago