https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 04:32:23 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-07169 bdu:2024-07169 https://cve.radiocsirt.org/vuln/bdu:2024-07169 https://cve.radiocsirt.org/vuln/bit-django-2024-38875 <p><strong>Affected:</strong> Bitnami: django</p> <p>An issue was discovered in Django 4.2 before 4.2.14 and 5.0 before 5.0.7. urlize and urlizetrunc were subject to a potential denial of service attack via certain inputs with a very large number of brackets.</p> <p><strong>Affected:</strong> Bitnami: django</p> <p>An issue was discovered in Django 4.2 before 4.2.14 and 5.0 before 5.0.7. urlize and urlizetrunc were subject to a potential denial of service attack via certain inputs with a very large number of brackets.</p> https://cve.radiocsirt.org/vuln/bit-django-2024-38875 https://cve.radiocsirt.org/vuln/euvd-2026-258911 EUVD-2026-258911 https://cve.radiocsirt.org/vuln/euvd-2026-258911 https://cve.radiocsirt.org/vuln/fkie_cve-2024-38875 <p>An issue was discovered in Django 4.2 before 4.2.14 and 5.0 before 5.0.7. urlize and urlizetrunc were subject to a potential denial of service attack via certain inputs with a very large number of brackets.</p> <p>An issue was discovered in Django 4.2 before 4.2.14 and 5.0 before 5.0.7. urlize and urlizetrunc were subject to a potential denial of service attack via certain inputs with a very large number of brackets.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-38875 https://cve.radiocsirt.org/vuln/ghsa-qg2p-9jwr-mmqf <p><strong>Affected:</strong> PyPI: Django</p> <p>An issue was discovered in Django 4.2 before 4.2.14 and 5.0 before 5.0.7. urlize and urlizetrunc were subject to a potential denial of service attack via certain inputs with a very large number of brackets.</p> <p><strong>Affected:</strong> PyPI: Django</p> <p>An issue was discovered in Django 4.2 before 4.2.14 and 5.0 before 5.0.7. urlize and urlizetrunc were subject to a potential denial of service attack via certain inputs with a very large number of brackets.</p> https://cve.radiocsirt.org/vuln/ghsa-qg2p-9jwr-mmqf https://cve.radiocsirt.org/vuln/oesa-2024-1948 <p><strong>Affected:</strong> openEuler:24.03-LTS: python-django</p> <p>Django is a high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fix(es): An issue was discovered in Django 4.2 before 4.2.14 and 5.0 before 5.0.7. urlize and urlizetrunc were subject to a potential denial of service attack via certain inputs with a very large number of brackets.(CVE-2024-38875)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS: python-django</p> <p>Django is a high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fix(es): An issue was discovered in Django 4.2 before 4.2.14 and 5.0 before 5.0.7. urlize and urlizetrunc were subject to a potential denial of service attack via certain inputs with a very large number of brackets.(CVE-2024-38875)</p> https://cve.radiocsirt.org/vuln/oesa-2024-1948 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14203-1 <p>python310-Django-5.0.7-2.1 on GA media</p> <p>python310-Django-5.0.7-2.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:14203-1 https://cve.radiocsirt.org/vuln/pysec-2024-56 <p><strong>Affected:</strong> PyPI: django</p> <p>An issue was discovered in Django 4.2 before 4.2.14 and 5.0 before 5.0.7. urlize and urlizetrunc were subject to a potential denial of service attack via certain inputs with a very large number of brackets.</p> <p><strong>Affected:</strong> PyPI: django</p> <p>An issue was discovered in Django 4.2 before 4.2.14 and 5.0 before 5.0.7. urlize and urlizetrunc were subject to a potential denial of service attack via certain inputs with a very large number of brackets.</p> https://cve.radiocsirt.org/vuln/pysec-2024-56 https://cve.radiocsirt.org/vuln/rhsa-2024:6428 <p>github.com/jaraco/zipp: Denial of Service (infinite loop) via crafted zip file in jaraco/zipp automation-controller: Gain access to the k8s API server via job execution with Container Group grpc: client communicating with a HTTP/2 proxy can poison the HPACK table between the proxy and the backend python-social-auth: Improper Handling of Case Sensitivity in social-auth-app-django python-jose: algorithm confusion with OpenSSH ECDSA keys and other key formats python-django: Potential denial-of-service in django.utils.html.urlize() python-django: Username enumeration through timing difference for users with unusable passwords python-django: Potential directory-traversal in django.core.files.storage.Storage.save() python-django: Potential denial-of-service in django.utils.translation.get_supported_language_variant() python-django: Memory exhaustion in django.utils.numberformat.floatformat() python-django: Potential denial-of-service vulnerability in django.utils.html.urlize() python-django: Potential denial-of-service vulnerability in django.utils.html.urlize() and AdminURLFieldWidget python-django: Potential SQL injection in QuerySet.values() and values_list()</p> <p>github.com/jaraco/zipp: Denial of Service (infinite loop) via crafted zip file in jaraco/zipp automation-controller: Gain access to the k8s API server via job execution with Container Group grpc: client communicating with a HTTP/2 proxy can poison the HPACK table between the proxy and the backend python-social-auth: Improper Handling of Case Sensitivity in social-auth-app-django python-jose: algorithm confusion with OpenSSH ECDSA keys and other key formats python-django: Potential denial-of-service in django.utils.html.urlize() python-django: Username enumeration through timing difference for users with unusable passwords python-django: Potential directory-traversal in django.core.files.storage.Storage.save() python-django: Potential denial-of-service in django.utils.translation.get_supported_language_variant() python-django: Memory exhaustion in django.utils.numberformat.floatformat() python-django: Potential denial-of-service vulnerability in django.utils.html.urlize() python-django: Potential denial-of-service vulnerability in django.utils.html.urlize() and AdminURLFieldWidget python-django: Potential SQL injection in QuerySet.values() and values_list()</p> https://cve.radiocsirt.org/vuln/rhsa-2024:6428 https://cve.radiocsirt.org/vuln/suse-su-2024:2545-1 <p>Security update for python-Django</p> <p>Security update for python-Django</p> https://cve.radiocsirt.org/vuln/suse-su-2024:2545-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-38875 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: python-django, Ubuntu:Pro:16.04:LTS: python-django, Ubuntu:Pro:18.04:LTS: python-django, Ubuntu:20.04:LTS: python-django, Ubuntu:22.04:LTS: python-django, Ubuntu:24.04:LTS: python-django</p> <p>An issue was discovered in Django 4.2 before 4.2.14 and 5.0 before 5.0.7. urlize and urlizetrunc were subject to a potential denial of service attack via certain inputs with a very large number of brackets.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: python-django, Ubuntu:Pro:16.04:LTS: python-django, Ubuntu:Pro:18.04:LTS: python-django, Ubuntu:20.04:LTS: python-django, Ubuntu:22.04:LTS: python-django, Ubuntu:24.04:LTS: python-django</p> <p>An issue was discovered in Django 4.2 before 4.2.14 and 5.0 before 5.0.7. urlize and urlizetrunc were subject to a potential denial of service attack via certain inputs with a very large number of brackets.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-38875 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1569 <p>Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Django ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder vertrauliche Informationen offenzulegen.</p> <p>Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Django ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder vertrauliche Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1569