~ / search / GHSA-xxj9-f6rv-m3x4

GHSA-xxj9-f6rv-m3x4

Django denial-of-service attack in the intcomma template filter

Source: GitHub Advisory Database (reviewed) High CVE-2024-24680

Packages

EcosystemPackageAffectedFixed in
PyPI Django >= 3.2, < 3.2.24 3.2.24
PyPI Django >= 4.2, < 4.2.10 4.2.10
PyPI Django >= 5.0, < 5.0.2 5.0.2

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered in Django 3.2 before 3.2.24, 4.2 before 4.2.10, and Django 5.0 before 5.0.2. The intcomma template filter was subject to a potential denial-of-service attack when used with very long strings.

References

External links from the advisory. They lead to third-party sites.