https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 11:55:37 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-06736 bdu:2024-06736 https://cve.radiocsirt.org/vuln/bdu:2024-06736 https://cve.radiocsirt.org/vuln/bit-django-2024-45230 <p><strong>Affected:</strong> Bitnami: django</p> <p>An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16. The urlize() and urlizetrunc() template filters are subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters.</p> <p><strong>Affected:</strong> Bitnami: django</p> <p>An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16. The urlize() and urlizetrunc() template filters are subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters.</p> https://cve.radiocsirt.org/vuln/bit-django-2024-45230 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0563 certfr-2025-avi-0563 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0563 https://cve.radiocsirt.org/vuln/euvd-2026-222965 EUVD-2026-222965 https://cve.radiocsirt.org/vuln/euvd-2026-222965 https://cve.radiocsirt.org/vuln/fkie_cve-2024-45230 <p>An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16. The urlize() and urlizetrunc() template filters are subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters.</p> <p>An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16. The urlize() and urlizetrunc() template filters are subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-45230 https://cve.radiocsirt.org/vuln/ghsa-5hgc-2vfp-mqvc <p><strong>Affected:</strong> PyPI: Django</p> <p>An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16. The urlize() and urlizetrunc() template filters are subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters.</p> <p><strong>Affected:</strong> PyPI: Django</p> <p>An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16. The urlize() and urlizetrunc() template filters are subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters.</p> https://cve.radiocsirt.org/vuln/ghsa-5hgc-2vfp-mqvc https://cve.radiocsirt.org/vuln/oesa-2024-2278 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: python-django</p> <p>Django is a high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fix(es): An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16. The urlize() and urlizetrunc() template filters are subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters.(CVE-2024-45230) An issue was discovered in Django v5.1.1, v5.0.9, and v4.2.16. The django.contrib.auth.forms.PasswordResetForm class, when used in a view implementing password reset flows, allows remote attackers to enumerate user e-mail addresses by sending password reset requests and observing the outcome (only when e-mail sending is consistently failing).(CVE-2024-45231)</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: python-django</p> <p>Django is a high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fix(es): An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16. The urlize() and urlizetrunc() template filters are subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters.(CVE-2024-45230) An issue was discovered in Django v5.1.1, v5.0.9, and v4.2.16. The django.contrib.auth.forms.PasswordResetForm class, when used in a view implementing password reset flows, allows remote attackers to enumerate user e-mail addresses by sending password reset requests and observing the outcome (only when e-mail sending is consistently failing).(CVE-2024-45231)</p> https://cve.radiocsirt.org/vuln/oesa-2024-2278 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14310-1 <p>python310-Django4-4.2.16-1.1 on GA media</p> <p>python310-Django4-4.2.16-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:14310-1 https://cve.radiocsirt.org/vuln/pysec-2024-102 <p><strong>Affected:</strong> PyPI: django</p> <p>An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16. The urlize() and urlizetrunc() template filters are subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters.</p> <p><strong>Affected:</strong> PyPI: django</p> <p>An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16. The urlize() and urlizetrunc() template filters are subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters.</p> https://cve.radiocsirt.org/vuln/pysec-2024-102 https://cve.radiocsirt.org/vuln/rhsa-2024:8534 <p>aap-gateway: XSS on aap-gateway quic-go: memory exhaustion attack against QUIC&#39;s connection ID mechanism python-django: Memory exhaustion in django.utils.numberformat.floatformat() python-django: Potential denial-of-service vulnerability in django.utils.html.urlize()</p> <p>aap-gateway: XSS on aap-gateway quic-go: memory exhaustion attack against QUIC&#39;s connection ID mechanism python-django: Memory exhaustion in django.utils.numberformat.floatformat() python-django: Potential denial-of-service vulnerability in django.utils.html.urlize()</p> https://cve.radiocsirt.org/vuln/rhsa-2024:8534 https://cve.radiocsirt.org/vuln/suse-su-2024:3139-1 <p>Security update for python-Django</p> <p>Security update for python-Django</p> https://cve.radiocsirt.org/vuln/suse-su-2024:3139-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-45230 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: python-django, Ubuntu:Pro:16.04:LTS: python-django, Ubuntu:Pro:18.04:LTS: python-django, Ubuntu:20.04:LTS: python-django, Ubuntu:22.04:LTS: python-django, Ubuntu:24.04:LTS: python-django</p> <p>An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16. The urlize() and urlizetrunc() template filters are subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: python-django, Ubuntu:Pro:16.04:LTS: python-django, Ubuntu:Pro:18.04:LTS: python-django, Ubuntu:20.04:LTS: python-django, Ubuntu:22.04:LTS: python-django, Ubuntu:24.04:LTS: python-django</p> <p>An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16. The urlize() and urlizetrunc() template filters are subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-45230 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-2044 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Django ausnutzen, um einen Denial of Service Angriff durchzuführen oder vertrauliche Informationen offenzulegen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Django ausnutzen, um einen Denial of Service Angriff durchzuführen oder vertrauliche Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-2044