Most recent entries from all

bdu:2020-01765

cnvd-2019-35880

EUVD-2026-56195

fkie_cve-2019-14232

An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. If django.utils.text.Truncator's chars() and words() methods were passed the html=True argument, they were extremely slow to evaluate certain inputs due to a catastrophic backtracking vulnerability in a regular expression. The chars() and words() methods are used to implement the truncatechars_html and truncatewords_html template filters, which were thus vulnerable.

GHSA-c4qh-4vgv-qc6g — Django Denial-of-service in django.utils.text.Truncator

Affected: PyPI: Django

An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. If `django.utils.text.Truncator`'s `chars()` and `words()` methods were passed the `html=True` argument, they were extremely slow to evaluate certain inputs due to a catastrophic backtracking vulnerability in a regular expression. The `chars()` and `words()` methods are used to implement the `truncatechars_htm`l and `truncatewords_html` template filters, which were thus vulnerable.

gsd-2019-14232

openSUSE-SU-2019:1839-1 — Security update for python-Django

Security update for python-Django

PYSEC-2019-11

Affected: PyPI: django

RHSA-2020:1324 — Red Hat Security Advisory: python-django security update

Django: Incorrect HTTP detection with reverse-proxy connecting via HTTPS Django: backtracking in a regular expression in django.utils.text.Truncator leads to DoS Django: the behavior of the underlying HTMLParser leading to DoS Django: SQL injection possibility in key and index lookups for JSONField/HStoreField Django: Potential memory exhaustion in django.utils.encoding.uri_to_iri()

SUSE-SU-2019:2180-1 — Security update for python-Django

Security update for python-Django

UBUNTU-CVE-2019-14232

Affected: Ubuntu:Pro:14.04:LTS: python-django, Ubuntu:16.04:LTS: python-django, Ubuntu:18.04:LTS: python-django, Ubuntu:20.04:LTS: python-django

WID-SEC-W-2024-0539 — Red Hat OpenStack: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenStack ausnutzen, um eine SQL-Injection durchzuführen, einen Denial of Service Zustand herbeizuführen oder Informationen offenzulegen.