Python/django/3.2.22

A high-level Python web framework that encourages rapid development and clean, pragmatic design.

https://pypi.org/project/django
BSD-3-Clause AND BSD

2 Security Vulnerabilities

Django potential denial of service vulnerability in UsernameField on Windows

Published date: 2023-11-02T06:30:25Z
CVE: CVE-2023-46695
Links:

An issue was discovered in Django 3.2 before 3.2.23, 4.1 before 4.1.13, and 4.2 before 4.2.7. The NFKC normalization is slow on Windows. As a consequence, django.contrib.auth.forms.UsernameField is subject to a potential DoS (denial of service) attack via certain inputs with a very large number of Unicode characters.

Affected versions: ["4.2", "4.2.1", "4.2.2", "4.2.3", "4.2.4", "4.2.5", "4.2.6", "4.1", "4.1.1", "4.1.2", "4.1.3", "4.1.4", "4.1.5", "4.1.6", "4.1.7", "4.1.8", "4.1.9", "4.1.10", "4.1.11", "4.1.12", "3.2", "3.2.1", "3.2.2", "3.2.3", "3.2.4", "3.2.5", "3.2.6", "3.2.7", "3.2.8", "3.2.9", "3.2.10", "3.2.11", "3.2.12", "3.2.13", "3.2.14", "3.2.15", "3.2.16", "3.2.17", "3.2.18", "3.2.19", "3.2.20", "3.2.21", "3.2.22"]
Secure versions: [2.2.27, 2.2.28, 3.0a1, 3.1.12, 3.1.13, 3.1.14, 3.2.25, 4.1.13, 4.2.17, 4.2.18, 4.2.19, 4.2.20, 4.2.21, 4.2.22, 4.2.23, 4.2a1, 4.2b1, 4.2rc1, 5.0.10, 5.0.11, 5.0.12, 5.0.13, 5.0.14, 5.0a1, 5.0b1, 5.0rc1, 5.1.10, 5.1.11, 5.1.4, 5.1.5, 5.1.6, 5.1.7, 5.1.8, 5.1.9, 5.1a1, 5.1b1, 5.1rc1, 5.2, 5.2.1, 5.2.2, 5.2.3, 5.2a1, 5.2b1, 5.2rc1]
Recommendation: Update to version 5.2.3.

Regular expression denial-of-service in Django

Published date: 2024-03-15T21:30:43Z
CVE: CVE-2024-27351
Links:

In Django 3.2 before 3.2.25, 4.2 before 4.2.11, and 5.0 before 5.0.3, the django.utils.text.Truncator.words() method (with html=True) and the truncatewords_html template filter are subject to a potential regular expression denial-of-service attack via a crafted string. NOTE: this issue exists because of an incomplete fix for CVE-2019-14232 and CVE-2023-43665.

Affected versions: ["5.0", "5.0.1", "5.0.2", "4.2", "4.2.1", "4.2.2", "4.2.3", "4.2.4", "4.2.5", "4.2.6", "4.2.7", "4.2.8", "4.2.9", "4.2.10", "3.2", "3.2.1", "3.2.2", "3.2.3", "3.2.4", "3.2.5", "3.2.6", "3.2.7", "3.2.8", "3.2.9", "3.2.10", "3.2.11", "3.2.12", "3.2.13", "3.2.14", "3.2.15", "3.2.16", "3.2.17", "3.2.18", "3.2.19", "3.2.20", "3.2.21", "3.2.22", "3.2.23", "3.2.24"]
Secure versions: [2.2.27, 2.2.28, 3.0a1, 3.1.12, 3.1.13, 3.1.14, 3.2.25, 4.1.13, 4.2.17, 4.2.18, 4.2.19, 4.2.20, 4.2.21, 4.2.22, 4.2.23, 4.2a1, 4.2b1, 4.2rc1, 5.0.10, 5.0.11, 5.0.12, 5.0.13, 5.0.14, 5.0a1, 5.0b1, 5.0rc1, 5.1.10, 5.1.11, 5.1.4, 5.1.5, 5.1.6, 5.1.7, 5.1.8, 5.1.9, 5.1a1, 5.1b1, 5.1rc1, 5.2, 5.2.1, 5.2.2, 5.2.3, 5.2a1, 5.2b1, 5.2rc1]
Recommendation: Update to version 5.2.3.

400 Other Versions

Version License Security Released
2.2.14 BSD 7 2020-07-01 - 04:49 about 5 years
2.2.13 BSD 7 2020-06-03 - 09:36 about 5 years
2.2.12 BSD 9 2020-04-01 - 07:59 about 5 years
2.2.11 BSD 9 2020-03-04 - 09:31 over 5 years
2.2.10 BSD 10 2020-02-03 - 09:50 over 5 years
2.2.9 BSD 10 2019-12-18 - 08:59 over 5 years
2.2.8 BSD 10 2019-12-02 - 08:57 over 5 years
2.2.7 BSD 11 2019-11-04 - 08:33 over 5 years
2.2.6 BSD 11 2019-10-01 - 08:36 over 5 years
2.2.5 BSD 11 2019-09-02 - 07:18 almost 6 years
2.2.4 BSD 11 2019-08-01 - 09:04 almost 6 years
2.2.3 BSD 15 2019-07-01 - 07:19 about 6 years
2.2.2 BSD 16 2019-06-03 - 10:11 about 6 years
2.2.1 BSD 18 2019-05-01 - 06:57 about 6 years
2.2 BSD 18 2019-04-01 - 12:47 about 6 years
2.1.15 BSD 2 2019-12-02 - 08:57 over 5 years
2.1.14 BSD 3 2019-11-04 - 08:33 over 5 years
2.1.13 BSD 3 2019-10-01 - 08:36 over 5 years
2.1.12 BSD 3 2019-09-02 - 07:18 almost 6 years
2.1.11 BSD 3 2019-08-01 - 09:04 almost 6 years
2.1.10 BSD 7 2019-07-01 - 07:19 about 6 years
2.1.9 BSD 8 2019-06-03 - 10:11 about 6 years
2.1.8 BSD 10 2019-04-01 - 09:18 about 6 years
2.1.7 BSD 10 2019-02-11 - 15:10 over 6 years
2.1.5 BSD 11 2019-01-04 - 13:52 over 6 years
2.1.4 BSD 12 2018-12-03 - 17:02 over 6 years
2.1.3 BSD 12 2018-11-01 - 14:36 over 6 years
2.1.2 BSD 12 2018-10-01 - 09:22 over 6 years
2.1.1 BSD 13 2018-08-31 - 08:42 almost 7 years
2.1 BSD 13 2018-08-01 - 14:11 almost 7 years
2.0.13 BSD 3 2019-02-12 - 10:50 over 6 years
2.0.12 BSD 3 2019-02-11 - 15:10 over 6 years
2.0.10 BSD 4 2019-01-04 - 14:03 over 6 years
2.0.9 BSD 5 2018-10-01 - 09:22 over 6 years
2.0.8 BSD 5 2018-08-01 - 13:51 almost 7 years
2.0.7 BSD 6 2018-07-02 - 09:02 almost 7 years
2.0.6 BSD 6 2018-06-01 - 15:32 about 7 years
2.0.5 BSD 6 2018-05-02 - 01:34 about 7 years
2.0.4 BSD 6 2018-04-03 - 02:39 about 7 years
2.0.3 BSD 6 2018-03-06 - 14:05 over 7 years
2.0.2 BSD 8 2018-02-01 - 14:30 over 7 years
2.0.1 BSD 8 2018-01-02 - 00:50 over 7 years
2.0 BSD 8 2017-12-02 - 15:11 over 7 years
1.11.29 BSD 1 2020-03-04 - 09:31 over 5 years
1.11.28 BSD 2 2020-02-03 - 09:50 over 5 years
1.11.27 BSD 3 2019-12-18 - 08:59 over 5 years
1.11.26 BSD 4 2019-11-04 - 08:33 over 5 years
1.11.25 BSD 4 2019-10-01 - 08:36 over 5 years
1.11.24 BSD 4 2019-09-02 - 07:18 almost 6 years
1.11.23 BSD 4 2019-08-01 - 09:04 almost 6 years