https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 03:41:36 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-11394 bdu:2024-11394 https://cve.radiocsirt.org/vuln/bdu:2024-11394 https://cve.radiocsirt.org/vuln/bit-django-2024-53907 <p><strong>Affected:</strong> Bitnami: django</p> <p>An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. The strip_tags() method and striptags template filter are subject to a potential denial-of-service attack via certain inputs containing large sequences of nested incomplete HTML entities.</p> <p><strong>Affected:</strong> Bitnami: django</p> <p>An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. The strip_tags() method and striptags template filter are subject to a potential denial-of-service attack via certain inputs containing large sequences of nested incomplete HTML entities.</p> https://cve.radiocsirt.org/vuln/bit-django-2024-53907 https://cve.radiocsirt.org/vuln/euvd-2026-207900 EUVD-2026-207900 https://cve.radiocsirt.org/vuln/euvd-2026-207900 https://cve.radiocsirt.org/vuln/fkie_cve-2024-53907 <p>An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. The strip_tags() method and striptags template filter are subject to a potential denial-of-service attack via certain inputs containing large sequences of nested incomplete HTML entities.</p> <p>An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. The strip_tags() method and striptags template filter are subject to a potential denial-of-service attack via certain inputs containing large sequences of nested incomplete HTML entities.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-53907 https://cve.radiocsirt.org/vuln/ghsa-8498-2h75-472j <p><strong>Affected:</strong> PyPI: Django</p> <p>An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. The strip_tags() method and striptags template filter are subject to a potential denial-of-service attack via certain inputs containing large sequences of nested incomplete HTML entities.</p> <p><strong>Affected:</strong> PyPI: Django</p> <p>An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. The strip_tags() method and striptags template filter are subject to a potential denial-of-service attack via certain inputs containing large sequences of nested incomplete HTML entities.</p> https://cve.radiocsirt.org/vuln/ghsa-8498-2h75-472j https://cve.radiocsirt.org/vuln/oesa-2024-2539 <p><strong>Affected:</strong> openEuler:24.03-LTS: python-django</p> <p>A high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fix(es): A vulnerability was found in the Django Web Framework. The strip_tags() and stripbtags template filter may be vulnerable to a potential denial of service (DoS) in cases of a large sequence of nested incomplete HTML entities.(CVE-2024-53907) A vulnerability was found in the Django Web Framework. The direct usage of django.db.models.fields.json.HasKey may be vulnerable to SQL injection if untrusted data is used to perform queries.(CVE-2024-53908)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS: python-django</p> <p>A high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fix(es): A vulnerability was found in the Django Web Framework. The strip_tags() and stripbtags template filter may be vulnerable to a potential denial of service (DoS) in cases of a large sequence of nested incomplete HTML entities.(CVE-2024-53907) A vulnerability was found in the Django Web Framework. The direct usage of django.db.models.fields.json.HasKey may be vulnerable to SQL injection if untrusted data is used to perform queries.(CVE-2024-53908)</p> https://cve.radiocsirt.org/vuln/oesa-2024-2539 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14565-1 <p>python310-Django4-4.2.17-1.1 on GA media</p> <p>python310-Django4-4.2.17-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:14565-1 https://cve.radiocsirt.org/vuln/pysec-2024-156 <p><strong>Affected:</strong> PyPI: django</p> <p>An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. The strip_tags() method and striptags template filter are subject to a potential denial-of-service attack via certain inputs containing large sequences of nested incomplete HTML entities.</p> <p><strong>Affected:</strong> PyPI: django</p> <p>An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. The strip_tags() method and striptags template filter are subject to a potential denial-of-service attack via certain inputs containing large sequences of nested incomplete HTML entities.</p> https://cve.radiocsirt.org/vuln/pysec-2024-156 https://cve.radiocsirt.org/vuln/rhsa-2024:11144 <p>django: Potential denial-of-service in django.utils.html.strip_tags() django: Potential SQL injection in HasKey(lhs, rhs) on Oracle</p> <p>django: Potential denial-of-service in django.utils.html.strip_tags() django: Potential SQL injection in HasKey(lhs, rhs) on Oracle</p> https://cve.radiocsirt.org/vuln/rhsa-2024:11144 https://cve.radiocsirt.org/vuln/suse-su-2024:4285-1 <p>Security update for python-Django</p> <p>Security update for python-Django</p> https://cve.radiocsirt.org/vuln/suse-su-2024:4285-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-53907 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: python-django, Ubuntu:Pro:16.04:LTS: python-django, Ubuntu:Pro:18.04:LTS: python-django, Ubuntu:20.04:LTS: python-django, Ubuntu:22.04:LTS: python-django, Ubuntu:24.04:LTS: python-django</p> <p>An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. The strip_tags() method and striptags template filter are subject to a potential denial-of-service attack via certain inputs containing large sequences of nested incomplete HTML entities.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: python-django, Ubuntu:Pro:16.04:LTS: python-django, Ubuntu:Pro:18.04:LTS: python-django, Ubuntu:20.04:LTS: python-django, Ubuntu:22.04:LTS: python-django, Ubuntu:24.04:LTS: python-django</p> <p>An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. The strip_tags() method and striptags template filter are subject to a potential denial-of-service attack via certain inputs containing large sequences of nested incomplete HTML entities.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-53907 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3609 <p>Ein anonymer Angreifer kann mehrere Schwachstellen in Django ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder Daten zu manipulieren.</p> <p>Ein anonymer Angreifer kann mehrere Schwachstellen in Django ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder Daten zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3609