Python/django/3.2.24


A high-level Python web framework that encourages rapid development and clean, pragmatic design.

https://pypi.org/project/django
BSD-3-Clause AND BSD

1 Security Vulnerabilities

Regular expression denial-of-service in Django

Published date: 2024-03-15T21:30:43Z
CVE: CVE-2024-27351
Links:

In Django 3.2 before 3.2.25, 4.2 before 4.2.11, and 5.0 before 5.0.3, the django.utils.text.Truncator.words() method (with html=True) and the truncatewords_html template filter are subject to a potential regular expression denial-of-service attack via a crafted string. NOTE: this issue exists because of an incomplete fix for CVE-2019-14232 and CVE-2023-43665.

Affected versions: ["5.0", "5.0.1", "5.0.2", "4.2", "4.2.1", "4.2.2", "4.2.3", "4.2.4", "4.2.5", "4.2.6", "4.2.7", "4.2.8", "4.2.9", "4.2.10", "3.2", "3.2.1", "3.2.2", "3.2.3", "3.2.4", "3.2.5", "3.2.6", "3.2.7", "3.2.8", "3.2.9", "3.2.10", "3.2.11", "3.2.12", "3.2.13", "3.2.14", "3.2.15", "3.2.16", "3.2.17", "3.2.18", "3.2.19", "3.2.20", "3.2.21", "3.2.22", "3.2.23", "3.2.24"]
Secure versions: [2.2.27, 2.2.28, 3.0a1, 3.1.12, 3.1.13, 3.1.14, 3.2.25, 4.1.13, 4.2.17, 4.2.18, 4.2.19, 4.2.20, 4.2.21, 4.2.22, 4.2.23, 4.2a1, 4.2b1, 4.2rc1, 5.0.10, 5.0.11, 5.0.12, 5.0.13, 5.0.14, 5.0a1, 5.0b1, 5.0rc1, 5.1.10, 5.1.11, 5.1.4, 5.1.5, 5.1.6, 5.1.7, 5.1.8, 5.1.9, 5.1a1, 5.1b1, 5.1rc1, 5.2, 5.2.1, 5.2.2, 5.2.3, 5.2a1, 5.2b1, 5.2rc1]
Recommendation: Update to version 5.2.3.

400 Other Versions

Version License Security Released
3.2.5 BSD-3-Clause AND BSD 10 2021-07-01 - 07:40 about 4 years
3.2.4 BSD-3-Clause AND BSD 10 2021-06-02 - 08:54 about 4 years
3.2.3 BSD-3-Clause AND BSD 11 2021-05-13 - 07:36 about 4 years
3.2.2 BSD-3-Clause AND BSD 11 2021-05-06 - 07:40 about 4 years
3.2.1 BSD-3-Clause AND BSD 11 2021-05-04 - 08:47 about 4 years
3.2 BSD-3-Clause AND BSD 11 2021-04-06 - 09:33 about 4 years
3.1.14 BSD-3-Clause AND BSD 2021-12-07 - 07:34 over 3 years
3.1.13 BSD-3-Clause AND BSD 2021-07-01 - 07:39 about 4 years
3.1.12 BSD-3-Clause AND BSD 2021-06-02 - 08:53 about 4 years
3.1.11 BSD-3-Clause AND BSD 1 2021-05-13 - 07:36 about 4 years
3.1.10 BSD-3-Clause AND BSD 1 2021-05-06 - 07:40 about 4 years
3.1.9 BSD-3-Clause AND BSD 1 2021-05-04 - 08:47 about 4 years
3.1.8 BSD-3-Clause AND BSD 1 2021-04-06 - 07:34 about 4 years
3.1.7 BSD-3-Clause AND BSD 1 2021-02-19 - 09:08 over 4 years
3.1.6 BSD-3-Clause AND BSD 1 2021-02-01 - 09:28 over 4 years
3.1.5 BSD-3-Clause AND BSD 2 2021-01-04 - 07:54 over 4 years
3.1.4 BSD-3-Clause AND BSD 2 2020-12-01 - 06:03 over 4 years
3.1.3 BSD-3-Clause AND BSD 2 2020-11-02 - 08:12 over 4 years
3.1.2 BSD-3-Clause AND BSD 2 2020-10-01 - 05:38 over 4 years
3.1.1 BSD-3-Clause AND BSD 2 2020-09-01 - 09:14 almost 5 years
3.1 BSD-3-Clause AND BSD 4 2020-08-04 - 08:07 almost 5 years
3.0.14 BSD 1 2021-04-06 - 07:34 about 4 years
3.0.13 BSD 1 2021-02-19 - 09:08 over 4 years
3.0.12 BSD 1 2021-02-01 - 09:28 over 4 years
3.0.11 BSD 2 2020-11-02 - 08:12 over 4 years
3.0.10 BSD 2 2020-09-01 - 09:14 almost 5 years
3.0.9 BSD 4 2020-08-03 - 07:23 almost 5 years
3.0.8 BSD 4 2020-07-01 - 04:49 about 5 years
3.0.7 BSD 4 2020-06-03 - 09:36 about 5 years
3.0.6 BSD 6 2020-05-04 - 05:26 about 5 years
3.0.5 BSD 6 2020-04-01 - 07:59 about 5 years
3.0.4 BSD 6 2020-03-04 - 09:31 over 5 years
3.0.3 BSD 7 2020-02-03 - 09:50 over 5 years
3.0.2 BSD 7 2020-01-02 - 07:22 over 5 years
3.0.1 BSD 7 2019-12-18 - 08:59 over 5 years
3.0 BSD 7 2019-12-02 - 11:13 over 5 years
2.2.28 BSD 2022-04-11 - 07:52 about 3 years
2.2.27 BSD 2022-02-01 - 07:56 over 3 years
2.2.26 BSD 2 2022-01-04 - 09:53 over 3 years
2.2.25 BSD 2 2021-12-07 - 07:34 over 3 years
2.2.24 BSD 2 2021-06-02 - 08:53 about 4 years
2.2.23 BSD 4 2021-05-13 - 07:36 about 4 years
2.2.22 BSD 4 2021-05-06 - 07:40 about 4 years
2.2.21 BSD 4 2021-05-04 - 08:47 about 4 years
2.2.20 BSD 4 2021-04-06 - 07:34 about 4 years
2.2.19 BSD 4 2021-02-19 - 09:07 over 4 years
2.2.18 BSD 4 2021-02-01 - 09:28 over 4 years
2.2.17 BSD 5 2020-11-02 - 08:12 over 4 years
2.2.16 BSD 5 2020-09-01 - 09:14 almost 5 years
2.2.15 BSD 7 2020-08-03 - 07:23 almost 5 years