Python/django/5.0.8

A high-level Python web framework that encourages rapid development and clean, pragmatic design.

https://pypi.org/project/django
BSD-3-Clause AND BSD

2 Security Vulnerabilities

Django denial-of-service in django.utils.html.strip_tags()

Published date: 2024-12-06T12:30:47Z
CVE: CVE-2024-53907
Links:

An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. The strip_tags() method and striptags template filter are subject to a potential denial-of-service attack via certain inputs containing large sequences of nested incomplete HTML entities.

Affected versions: ["4.2", "4.2.1", "4.2.2", "4.2.3", "4.2.4", "4.2.5", "4.2.6", "4.2.7", "4.2.8", "4.2.9", "4.2.10", "4.2.11", "4.2.12", "4.2.13", "4.2.14", "4.2.15", "4.2.16", "5.0", "5.0.1", "5.0.2", "5.0.3", "5.0.4", "5.0.5", "5.0.6", "5.0.7", "5.0.8", "5.0.9", "5.1", "5.1.1", "5.1.2", "5.1.3"]
Secure versions: [2.2.27, 2.2.28, 3.0a1, 3.1.12, 3.1.13, 3.1.14, 3.2.25, 4.1.13, 4.2.17, 4.2.18, 4.2.19, 4.2.20, 4.2.21, 4.2.22, 4.2.23, 4.2a1, 4.2b1, 4.2rc1, 5.0.10, 5.0.11, 5.0.12, 5.0.13, 5.0.14, 5.0a1, 5.0b1, 5.0rc1, 5.1.10, 5.1.11, 5.1.4, 5.1.5, 5.1.6, 5.1.7, 5.1.8, 5.1.9, 5.1a1, 5.1b1, 5.1rc1, 5.2, 5.2.1, 5.2.2, 5.2.3, 5.2a1, 5.2b1, 5.2rc1]
Recommendation: Update to version 5.2.3.

Django SQL injection in HasKey(lhs, rhs) on Oracle

Published date: 2024-12-06T12:30:47Z
CVE: CVE-2024-53908
Links:

An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. Direct usage of the django.db.models.fields.json.HasKey lookup, when an Oracle database is used, is subject to SQL injection if untrusted data is used as an lhs value. (Applications that use the jsonfield.haskey lookup via _ are unaffected.)

Affected versions: ["4.2", "4.2.1", "4.2.2", "4.2.3", "4.2.4", "4.2.5", "4.2.6", "4.2.7", "4.2.8", "4.2.9", "4.2.10", "4.2.11", "4.2.12", "4.2.13", "4.2.14", "4.2.15", "4.2.16", "5.0", "5.0.1", "5.0.2", "5.0.3", "5.0.4", "5.0.5", "5.0.6", "5.0.7", "5.0.8", "5.0.9", "5.1", "5.1.1", "5.1.2", "5.1.3"]
Secure versions: [2.2.27, 2.2.28, 3.0a1, 3.1.12, 3.1.13, 3.1.14, 3.2.25, 4.1.13, 4.2.17, 4.2.18, 4.2.19, 4.2.20, 4.2.21, 4.2.22, 4.2.23, 4.2a1, 4.2b1, 4.2rc1, 5.0.10, 5.0.11, 5.0.12, 5.0.13, 5.0.14, 5.0a1, 5.0b1, 5.0rc1, 5.1.10, 5.1.11, 5.1.4, 5.1.5, 5.1.6, 5.1.7, 5.1.8, 5.1.9, 5.1a1, 5.1b1, 5.1rc1, 5.2, 5.2.1, 5.2.2, 5.2.3, 5.2a1, 5.2b1, 5.2rc1]
Recommendation: Update to version 5.2.3.

400 Other Versions

Version License Security Released
1.5.1 BSD 16 2013-03-28 - 20:57 over 12 years
1.5 BSD 16 2013-02-26 - 19:30 over 12 years
1.4.22 BSD 10 2015-08-18 - 17:22 almost 10 years
1.4.21 BSD 11 2015-07-08 - 19:56 almost 10 years
1.4.20 BSD 13 2015-03-19 - 00:03 over 10 years
1.4.19 BSD 13 2015-01-27 - 17:11 over 10 years
1.4.18 BSD 13 2015-01-13 - 18:54 over 10 years
1.4.17 BSD 16 2015-01-03 - 02:20 over 10 years
1.4.16 BSD 16 2014-10-22 - 16:37 over 10 years
1.4.15 BSD 16 2014-09-02 - 20:44 almost 11 years
1.4.14 BSD 16 2014-08-20 - 20:01 almost 11 years
1.4.13 BSD 19 2014-05-14 - 18:27 about 11 years
1.4.12 BSD 21 2014-04-28 - 20:30 about 11 years
1.4.11 BSD 21 2014-04-21 - 22:40 about 11 years
1.4.10 BSD 23 2013-11-06 - 14:21 over 11 years
1.4.9 BSD 23 2013-10-25 - 04:38 over 11 years
1.4.8 BSD 23 2013-09-15 - 06:22 almost 12 years
1.4.7 BSD 24 2013-09-11 - 01:18 almost 12 years
1.4.6 BSD 25 2013-08-13 - 16:52 almost 12 years
1.4.5 BSD 26 2013-02-20 - 19:54 over 12 years
1.4.4 BSD 26 2013-02-19 - 20:27 over 12 years
1.4.3 BSD 28 2012-12-10 - 21:46 over 12 years
1.4.2 BSD 28 2012-10-17 - 22:18 over 12 years
1.4.1 BSD 29 2012-07-30 - 22:48 almost 13 years
1.4 BSD 30 2012-03-23 - 18:00 over 13 years
1.3.7 BSD 20 2013-02-20 - 20:03 over 12 years
1.3.6 BSD 20 2013-02-19 - 20:32 over 12 years
1.3.5 BSD 22 2012-12-10 - 21:39 over 12 years
1.3.4 BSD 22 2013-03-05 - 22:33 over 12 years
1.3.3 BSD 23 2012-08-01 - 22:08 almost 13 years
1.3.2 BSD 23 2012-07-30 - 23:02 almost 13 years
1.3.1 BSD 25 2011-09-10 - 03:36 almost 14 years
1.3 BSD 28 2011-03-23 - 06:09 over 14 years
1.2.7 BSD 22 2011-09-11 - 03:05 almost 14 years
1.2.6 BSD 26 2011-09-10 - 03:42 almost 14 years
1.2.5 BSD 26 2011-02-09 - 04:08 over 14 years
1.2.4 BSD 29 2010-12-23 - 05:15 over 14 years
1.2.3 BSD 29 2010-09-11 - 08:50 almost 15 years
1.2.2 BSD 29 2010-09-09 - 02:41 almost 15 years
1.2.1 BSD 30 2010-05-24 - 21:19 about 15 years
1.2 BSD 30 2010-05-17 - 20:04 about 15 years
1.1.4 BSD 24 2011-02-09 - 04:13 over 14 years
1.1.3 BSD 27 2010-12-23 - 05:14 over 14 years
1.1.2 BSD 29 1970-01-01 - 00:00 over 55 years
1.1.1 BSD 29 1970-01-01 - 00:00 over 55 years
1.1 BSD 29 1970-01-01 - 00:00 over 55 years
1.0.4 BSD 26 1970-01-01 - 00:00 over 55 years
1.0.3 BSD 26 1970-01-01 - 00:00 over 55 years
1.0.2 BSD 26 1970-01-01 - 00:00 over 55 years
1.0.1 BSD 26 1970-01-01 - 00:00 over 55 years