https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 18:40:58 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-07321 bdu:2023-07321 https://cve.radiocsirt.org/vuln/bdu:2023-07321 https://cve.radiocsirt.org/vuln/bit-django-2023-43665 <p><strong>Affected:</strong> Bitnami: django</p> <p>In Django 3.2 before 3.2.22, 4.1 before 4.1.12, and 4.2 before 4.2.6, the django.utils.text.Truncator chars() and words() methods (when used with html=True) are subject to a potential DoS (denial of service) attack via certain inputs with very long, potentially malformed HTML text. The chars() and words() methods are used to implement the truncatechars_html and truncatewords_html template filters, which are thus also vulnerable. NOTE: this issue exists because of an incomplete fix for CVE-2019-14232.</p> <p><strong>Affected:</strong> Bitnami: django</p> <p>In Django 3.2 before 3.2.22, 4.1 before 4.1.12, and 4.2 before 4.2.6, the django.utils.text.Truncator chars() and words() methods (when used with html=True) are subject to a potential DoS (denial of service) attack via certain inputs with very long, potentially malformed HTML text. The chars() and words() methods are used to implement the truncatechars_html and truncatewords_html template filters, which are thus also vulnerable. NOTE: this issue exists because of an incomplete fix for CVE-2019-14232.</p> https://cve.radiocsirt.org/vuln/bit-django-2023-43665 https://cve.radiocsirt.org/vuln/euvd-2026-258980 EUVD-2026-258980 https://cve.radiocsirt.org/vuln/euvd-2026-258980 https://cve.radiocsirt.org/vuln/fkie_cve-2023-43665 <p>In Django 3.2 before 3.2.22, 4.1 before 4.1.12, and 4.2 before 4.2.6, the django.utils.text.Truncator chars() and words() methods (when used with html=True) are subject to a potential DoS (denial of service) attack via certain inputs with very long, potentially malformed HTML text. The chars() and words() methods are used to implement the truncatechars_html and truncatewords_html template filters, which are thus also vulnerable. NOTE: this issue exists because of an incomplete fix for CVE-2019-14232.</p> <p>In Django 3.2 before 3.2.22, 4.1 before 4.1.12, and 4.2 before 4.2.6, the django.utils.text.Truncator chars() and words() methods (when used with html=True) are subject to a potential DoS (denial of service) attack via certain inputs with very long, potentially malformed HTML text. The chars() and words() methods are used to implement the truncatechars_html and truncatewords_html template filters, which are thus also vulnerable. NOTE: this issue exists because of an incomplete fix for CVE-2019-14232.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-43665 https://cve.radiocsirt.org/vuln/ghsa-h8gc-pgj2-vjm3 <p><strong>Affected:</strong> PyPI: Django</p> <p>In Django 3.2 before 3.2.22, 4.1 before 4.1.12, and 4.2 before 4.2.6, the django.utils.text.Truncator chars() and words() methods (when used with html=True) are subject to a potential DoS (denial of service) attack via certain inputs with very long, potentially malformed HTML text. The chars() and words() methods are used to implement the truncatechars_html and truncatewords_html template filters, which are thus also vulnerable. NOTE: this issue exists because of an incomplete fix for CVE-2019-14232.</p> <p><strong>Affected:</strong> PyPI: Django</p> <p>In Django 3.2 before 3.2.22, 4.1 before 4.1.12, and 4.2 before 4.2.6, the django.utils.text.Truncator chars() and words() methods (when used with html=True) are subject to a potential DoS (denial of service) attack via certain inputs with very long, potentially malformed HTML text. The chars() and words() methods are used to implement the truncatechars_html and truncatewords_html template filters, which are thus also vulnerable. NOTE: this issue exists because of an incomplete fix for CVE-2019-14232.</p> https://cve.radiocsirt.org/vuln/ghsa-h8gc-pgj2-vjm3 https://cve.radiocsirt.org/vuln/gsd-2023-43665 gsd-2023-43665 https://cve.radiocsirt.org/vuln/gsd-2023-43665 https://cve.radiocsirt.org/vuln/oesa-2023-1722 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: python-django, openEuler:20.03-LTS-SP3: python-django, openEuler:22.03-LTS: python-django, openEuler:22.03-LTS-SP1: python-django, openEuler:22.03-LTS-SP2: python-django</p> <p>Django is a high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fix(es): An inefficient regular expression complexity was found in Django. The text truncator regular expressions exhibit linear backtracking complexity, which can be slow, leading to a potential denial of service, given certain HTML inputs.(CVE-2023-43665)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: python-django, openEuler:20.03-LTS-SP3: python-django, openEuler:22.03-LTS: python-django, openEuler:22.03-LTS-SP1: python-django, openEuler:22.03-LTS-SP2: python-django</p> <p>Django is a high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fix(es): An inefficient regular expression complexity was found in Django. The text truncator regular expressions exhibit linear backtracking complexity, which can be slow, leading to a potential denial of service, given certain HTML inputs.(CVE-2023-43665)</p> https://cve.radiocsirt.org/vuln/oesa-2023-1722 https://cve.radiocsirt.org/vuln/opensuse-su-2023:0310-1 <p>Security update for python-Django</p> <p>Security update for python-Django</p> https://cve.radiocsirt.org/vuln/opensuse-su-2023:0310-1 https://cve.radiocsirt.org/vuln/pysec-2023-226 <p><strong>Affected:</strong> PyPI: django</p> <p>In Django 3.2 before 3.2.22, 4.1 before 4.1.12, and 4.2 before 4.2.6, the django.utils.text.Truncator chars() and words() methods (when used with html=True) are subject to a potential DoS (denial of service) attack via certain inputs with very long, potentially malformed HTML text. The chars() and words() methods are used to implement the truncatechars_html and truncatewords_html template filters, which are thus also vulnerable. NOTE: this issue exists because of an incomplete fix for CVE-2019-14232.</p> <p><strong>Affected:</strong> PyPI: django</p> <p>In Django 3.2 before 3.2.22, 4.1 before 4.1.12, and 4.2 before 4.2.6, the django.utils.text.Truncator chars() and words() methods (when used with html=True) are subject to a potential DoS (denial of service) attack via certain inputs with very long, potentially malformed HTML text. The chars() and words() methods are used to implement the truncatechars_html and truncatewords_html template filters, which are thus also vulnerable. NOTE: this issue exists because of an incomplete fix for CVE-2019-14232.</p> https://cve.radiocsirt.org/vuln/pysec-2023-226 https://cve.radiocsirt.org/vuln/rhsa-2023:5758 <p>Ansible: malicious role archive can cause ansible-galaxy to overwrite arbitrary files python-django: Potential denial of service vulnerability in ``django.utils.encoding.uri_to_iri()`` python-django: Denial-of-service possibility in django.utils.text.Truncator</p> <p>Ansible: malicious role archive can cause ansible-galaxy to overwrite arbitrary files python-django: Potential denial of service vulnerability in ``django.utils.encoding.uri_to_iri()`` python-django: Denial-of-service possibility in django.utils.text.Truncator</p> https://cve.radiocsirt.org/vuln/rhsa-2023:5758 https://cve.radiocsirt.org/vuln/suse-su-2023:4232-1 <p>Security update for python-Django</p> <p>Security update for python-Django</p> https://cve.radiocsirt.org/vuln/suse-su-2023:4232-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-43665 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: python-django, Ubuntu:Pro:16.04:LTS: python-django, Ubuntu:Pro:18.04:LTS: python-django, Ubuntu:20.04:LTS: python-django, Ubuntu:22.04:LTS: python-django, Ubuntu:24.04:LTS: python-django</p> <p>In Django 3.2 before 3.2.22, 4.1 before 4.1.12, and 4.2 before 4.2.6, the django.utils.text.Truncator chars() and words() methods (when used with html=True) are subject to a potential DoS (denial of service) attack via certain inputs with very long, potentially malformed HTML text. The chars() and words() methods are used to implement the truncatechars_html and truncatewords_html template filters, which are thus also vulnerable. NOTE: this issue exists because of an incomplete fix for CVE-2019-14232.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: python-django, Ubuntu:Pro:16.04:LTS: python-django, Ubuntu:Pro:18.04:LTS: python-django, Ubuntu:20.04:LTS: python-django, Ubuntu:22.04:LTS: python-django, Ubuntu:24.04:LTS: python-django</p> <p>In Django 3.2 before 3.2.22, 4.1 before 4.1.12, and 4.2 before 4.2.6, the django.utils.text.Truncator chars() and words() methods (when used with html=True) are subject to a potential DoS (denial of service) attack via certain inputs with very long, potentially malformed HTML text. The chars() and words() methods are used to implement the truncatechars_html and truncatewords_html template filters, which are thus also vulnerable. NOTE: this issue exists because of an incomplete fix for CVE-2019-14232.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-43665 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2571 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Django und Ubuntu Linux ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Django und Ubuntu Linux ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2571