https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T10:59:54.524845+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-28865 CVE-2024-28865 — django-wiki denial of service via regular expression 2026-10-12T10:59:54.526821+00:00

Affected: django-wiki, django-wiki_project django-wiki

django-wiki is a wiki system for Django. Installations of django-wiki prior to version 0.10.1 are vulnerable to maliciously crafted article content that can cause severe use of server CPU through a regular expression loop. Version 0.10.1 fixes this issue. As a workaround, close off access to create and edit articles by anonymous users.

 https://cve.radiocsirt.org/vuln/ghsa-wj85-w4f4-xh8h GHSA-wj85-w4f4-xh8h — Denial of service via regular expression 2026-10-12T10:59:54.526872+00:00

Affected: PyPI: wiki

### Impact

All historical installations of django-wiki are vulnerable to maliciously crafted article content, that can cause severe use of server CPU through a regular expression loop.

### Patches

### Workarounds

Close off access to create and edit articles by anonymous users.

### References _Are there any links users can visit to find out more?_