Python/django/4.2.13

A high-level Python web framework that encourages rapid development and clean, pragmatic design.

https://pypi.org/project/django
BSD-3-Clause AND BSD

2 Security Vulnerabilities

Django denial-of-service in django.utils.html.strip_tags()

Published date: 2024-12-06T12:30:47Z
CVE: CVE-2024-53907
Links:

An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. The strip_tags() method and striptags template filter are subject to a potential denial-of-service attack via certain inputs containing large sequences of nested incomplete HTML entities.

Affected versions: ["4.2", "4.2.1", "4.2.2", "4.2.3", "4.2.4", "4.2.5", "4.2.6", "4.2.7", "4.2.8", "4.2.9", "4.2.10", "4.2.11", "4.2.12", "4.2.13", "4.2.14", "4.2.15", "4.2.16", "5.0", "5.0.1", "5.0.2", "5.0.3", "5.0.4", "5.0.5", "5.0.6", "5.0.7", "5.0.8", "5.0.9", "5.1", "5.1.1", "5.1.2", "5.1.3"]
Secure versions: [2.2.27, 2.2.28, 3.0a1, 3.1.12, 3.1.13, 3.1.14, 3.2.25, 4.1.13, 4.2.17, 4.2.18, 4.2.19, 4.2.20, 4.2.21, 4.2.22, 4.2.23, 4.2a1, 4.2b1, 4.2rc1, 5.0.10, 5.0.11, 5.0.12, 5.0.13, 5.0.14, 5.0a1, 5.0b1, 5.0rc1, 5.1.10, 5.1.11, 5.1.4, 5.1.5, 5.1.6, 5.1.7, 5.1.8, 5.1.9, 5.1a1, 5.1b1, 5.1rc1, 5.2, 5.2.1, 5.2.2, 5.2.3, 5.2a1, 5.2b1, 5.2rc1]
Recommendation: Update to version 5.2.3.

Django SQL injection in HasKey(lhs, rhs) on Oracle

Published date: 2024-12-06T12:30:47Z
CVE: CVE-2024-53908
Links:

An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. Direct usage of the django.db.models.fields.json.HasKey lookup, when an Oracle database is used, is subject to SQL injection if untrusted data is used as an lhs value. (Applications that use the jsonfield.haskey lookup via _ are unaffected.)

Affected versions: ["4.2", "4.2.1", "4.2.2", "4.2.3", "4.2.4", "4.2.5", "4.2.6", "4.2.7", "4.2.8", "4.2.9", "4.2.10", "4.2.11", "4.2.12", "4.2.13", "4.2.14", "4.2.15", "4.2.16", "5.0", "5.0.1", "5.0.2", "5.0.3", "5.0.4", "5.0.5", "5.0.6", "5.0.7", "5.0.8", "5.0.9", "5.1", "5.1.1", "5.1.2", "5.1.3"]
Secure versions: [2.2.27, 2.2.28, 3.0a1, 3.1.12, 3.1.13, 3.1.14, 3.2.25, 4.1.13, 4.2.17, 4.2.18, 4.2.19, 4.2.20, 4.2.21, 4.2.22, 4.2.23, 4.2a1, 4.2b1, 4.2rc1, 5.0.10, 5.0.11, 5.0.12, 5.0.13, 5.0.14, 5.0a1, 5.0b1, 5.0rc1, 5.1.10, 5.1.11, 5.1.4, 5.1.5, 5.1.6, 5.1.7, 5.1.8, 5.1.9, 5.1a1, 5.1b1, 5.1rc1, 5.2, 5.2.1, 5.2.2, 5.2.3, 5.2a1, 5.2b1, 5.2rc1]
Recommendation: Update to version 5.2.3.

400 Other Versions

Version License Security Released
3.2.5 BSD-3-Clause AND BSD 10 2021-07-01 - 07:40 almost 4 years
3.2.4 BSD-3-Clause AND BSD 10 2021-06-02 - 08:54 about 4 years
3.2.3 BSD-3-Clause AND BSD 11 2021-05-13 - 07:36 about 4 years
3.2.2 BSD-3-Clause AND BSD 11 2021-05-06 - 07:40 about 4 years
3.2.1 BSD-3-Clause AND BSD 11 2021-05-04 - 08:47 about 4 years
3.2 BSD-3-Clause AND BSD 11 2021-04-06 - 09:33 about 4 years
3.1.14 BSD-3-Clause AND BSD 2021-12-07 - 07:34 over 3 years
3.1.13 BSD-3-Clause AND BSD 2021-07-01 - 07:39 almost 4 years
3.1.12 BSD-3-Clause AND BSD 2021-06-02 - 08:53 about 4 years
3.1.11 BSD-3-Clause AND BSD 1 2021-05-13 - 07:36 about 4 years
3.1.10 BSD-3-Clause AND BSD 1 2021-05-06 - 07:40 about 4 years
3.1.9 BSD-3-Clause AND BSD 1 2021-05-04 - 08:47 about 4 years
3.1.8 BSD-3-Clause AND BSD 1 2021-04-06 - 07:34 about 4 years
3.1.7 BSD-3-Clause AND BSD 1 2021-02-19 - 09:08 over 4 years
3.1.6 BSD-3-Clause AND BSD 1 2021-02-01 - 09:28 over 4 years
3.1.5 BSD-3-Clause AND BSD 2 2021-01-04 - 07:54 over 4 years
3.1.4 BSD-3-Clause AND BSD 2 2020-12-01 - 06:03 over 4 years
3.1.3 BSD-3-Clause AND BSD 2 2020-11-02 - 08:12 over 4 years
3.1.2 BSD-3-Clause AND BSD 2 2020-10-01 - 05:38 over 4 years
3.1.1 BSD-3-Clause AND BSD 2 2020-09-01 - 09:14 almost 5 years
3.1 BSD-3-Clause AND BSD 4 2020-08-04 - 08:07 almost 5 years
3.0.14 BSD 1 2021-04-06 - 07:34 about 4 years
3.0.13 BSD 1 2021-02-19 - 09:08 over 4 years
3.0.12 BSD 1 2021-02-01 - 09:28 over 4 years
3.0.11 BSD 2 2020-11-02 - 08:12 over 4 years
3.0.10 BSD 2 2020-09-01 - 09:14 almost 5 years
3.0.9 BSD 4 2020-08-03 - 07:23 almost 5 years
3.0.8 BSD 4 2020-07-01 - 04:49 about 5 years
3.0.7 BSD 4 2020-06-03 - 09:36 about 5 years
3.0.6 BSD 6 2020-05-04 - 05:26 about 5 years
3.0.5 BSD 6 2020-04-01 - 07:59 about 5 years
3.0.4 BSD 6 2020-03-04 - 09:31 over 5 years
3.0.3 BSD 7 2020-02-03 - 09:50 over 5 years
3.0.2 BSD 7 2020-01-02 - 07:22 over 5 years
3.0.1 BSD 7 2019-12-18 - 08:59 over 5 years
3.0 BSD 7 2019-12-02 - 11:13 over 5 years
2.2.28 BSD 2022-04-11 - 07:52 about 3 years
2.2.27 BSD 2022-02-01 - 07:56 over 3 years
2.2.26 BSD 2 2022-01-04 - 09:53 over 3 years
2.2.25 BSD 2 2021-12-07 - 07:34 over 3 years
2.2.24 BSD 2 2021-06-02 - 08:53 about 4 years
2.2.23 BSD 4 2021-05-13 - 07:36 about 4 years
2.2.22 BSD 4 2021-05-06 - 07:40 about 4 years
2.2.21 BSD 4 2021-05-04 - 08:47 about 4 years
2.2.20 BSD 4 2021-04-06 - 07:34 about 4 years
2.2.19 BSD 4 2021-02-19 - 09:07 over 4 years
2.2.18 BSD 4 2021-02-01 - 09:28 over 4 years
2.2.17 BSD 5 2020-11-02 - 08:12 over 4 years
2.2.16 BSD 5 2020-09-01 - 09:14 almost 5 years
2.2.15 BSD 7 2020-08-03 - 07:23 almost 5 years