| Package | Affected versions | Patched versions |
|---|---|---|
| django | ≥ 4.2, < 4.2.16≥ 5.0, < 5.0.9≥ 5.1, < 5.1.1 | 4.2.165.0.95.1.1 |
| django | = 5.1≥ 4.2.0, < 4.2.16≥ 5.0, < 5.0.9 | 4.2.165.0.9 |
An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16. The urlize() and urlizetrunc() template filters are subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free