VDB
Sign up
—

PYSEC-2024-102

Quick fix

PYSEC-2024-102 — django: upgrade to the fixed version with the command below.

pip install --upgrade 'django>=4.2.16'

Details

An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16. The urlize() and urlizetrunc() template filters are subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/django
Introduced in: 5.1Fixed in: 5.1.1
Fixpip install --upgrade 'django>=4.2.16'

References