Python/django/3.2.22

A high-level Python web framework that encourages rapid development and clean, pragmatic design.

https://pypi.org/project/django
BSD-3-Clause AND BSD

2 Security Vulnerabilities

Django potential denial of service vulnerability in UsernameField on Windows

Published date: 2023-11-02T06:30:25Z
CVE: CVE-2023-46695
Links:

An issue was discovered in Django 3.2 before 3.2.23, 4.1 before 4.1.13, and 4.2 before 4.2.7. The NFKC normalization is slow on Windows. As a consequence, django.contrib.auth.forms.UsernameField is subject to a potential DoS (denial of service) attack via certain inputs with a very large number of Unicode characters.

Affected versions: ["4.2", "4.2.1", "4.2.2", "4.2.3", "4.2.4", "4.2.5", "4.2.6", "4.1", "4.1.1", "4.1.2", "4.1.3", "4.1.4", "4.1.5", "4.1.6", "4.1.7", "4.1.8", "4.1.9", "4.1.10", "4.1.11", "4.1.12", "3.2", "3.2.1", "3.2.2", "3.2.3", "3.2.4", "3.2.5", "3.2.6", "3.2.7", "3.2.8", "3.2.9", "3.2.10", "3.2.11", "3.2.12", "3.2.13", "3.2.14", "3.2.15", "3.2.16", "3.2.17", "3.2.18", "3.2.19", "3.2.20", "3.2.21", "3.2.22"]
Secure versions: [3.0a1, 3.1.12, 3.1.13, 3.1.14, 2.2.27, 2.2.28, 4.2a1, 4.2b1, 4.2rc1, 5.0a1, 5.0b1, 4.1.13, 5.0rc1, 3.2.25, 4.2.11, 5.0.3, 5.0.4, 4.2.12, 5.0.5, 4.2.13, 5.0.6, 5.1a1, 5.1b1, 4.2.14, 5.0.7, 5.1rc1, 4.2.15, 5.0.8, 5.1, 4.2.16, 5.0.9, 5.1.1, 5.1.2, 5.1.3]
Recommendation: Update to version 5.1.3.

Regular expression denial-of-service in Django

Published date: 2024-03-15T21:30:43Z
CVE: CVE-2024-27351
Links:

In Django 3.2 before 3.2.25, 4.2 before 4.2.11, and 5.0 before 5.0.3, the django.utils.text.Truncator.words() method (with html=True) and the truncatewords_html template filter are subject to a potential regular expression denial-of-service attack via a crafted string. NOTE: this issue exists because of an incomplete fix for CVE-2019-14232 and CVE-2023-43665.

Affected versions: ["5.0", "5.0.1", "5.0.2", "4.2", "4.2.1", "4.2.2", "4.2.3", "4.2.4", "4.2.5", "4.2.6", "4.2.7", "4.2.8", "4.2.9", "4.2.10", "3.2", "3.2.1", "3.2.2", "3.2.3", "3.2.4", "3.2.5", "3.2.6", "3.2.7", "3.2.8", "3.2.9", "3.2.10", "3.2.11", "3.2.12", "3.2.13", "3.2.14", "3.2.15", "3.2.16", "3.2.17", "3.2.18", "3.2.19", "3.2.20", "3.2.21", "3.2.22", "3.2.23", "3.2.24"]
Secure versions: [3.0a1, 3.1.12, 3.1.13, 3.1.14, 2.2.27, 2.2.28, 4.2a1, 4.2b1, 4.2rc1, 5.0a1, 5.0b1, 4.1.13, 5.0rc1, 3.2.25, 4.2.11, 5.0.3, 5.0.4, 4.2.12, 5.0.5, 4.2.13, 5.0.6, 5.1a1, 5.1b1, 4.2.14, 5.0.7, 5.1rc1, 4.2.15, 5.0.8, 5.1, 4.2.16, 5.0.9, 5.1.1, 5.1.2, 5.1.3]
Recommendation: Update to version 5.1.3.

373 Other Versions

Version License Security Released
5.1.3 BSD-3-Clause AND BSD
5.1.2 BSD-3-Clause AND BSD
5.1.1 BSD-3-Clause AND BSD
5.1 BSD-3-Clause AND BSD
5.0.9 BSD-3-Clause AND BSD
5.0.8 BSD-3-Clause AND BSD
5.0.7 BSD-3-Clause AND BSD
5.0.6 BSD-3-Clause AND BSD
5.0.5 BSD-3-Clause AND BSD
5.0.4 BSD-3-Clause AND BSD
5.0.3 BSD-3-Clause AND BSD
5.0.2 BSD-3-Clause AND BSD 1
5.0.1 BSD-3-Clause AND BSD 2
5.0 BSD-3-Clause AND BSD 2
4.2.16 BSD-3-Clause AND BSD
4.2.15 BSD-3-Clause AND BSD
4.2.14 BSD-3-Clause AND BSD
4.2.13 BSD-3-Clause AND BSD
4.2.12 BSD-3-Clause AND BSD
4.2.11 BSD-3-Clause AND BSD
4.2.10 BSD-3-Clause AND BSD 1
4.2.9 BSD-3-Clause AND BSD 2
4.2.8 BSD-3-Clause AND BSD 2
4.2.7 BSD-3-Clause AND BSD 2
4.2.6 BSD-3-Clause AND BSD 3
4.2.5 BSD-3-Clause AND BSD 4
4.2.4 BSD-3-Clause AND BSD 5
4.2.3 BSD-3-Clause AND BSD 5
4.2.2 BSD-3-Clause AND BSD 6
4.2.1 BSD-3-Clause AND BSD 6
4.2 BSD-3-Clause AND BSD 6
4.1.13 BSD-3-Clause AND BSD
4.1.12 BSD-3-Clause AND BSD 1
4.1.11 BSD-3-Clause AND BSD 2
4.1.10 BSD-3-Clause AND BSD 3
4.1.9 BSD-3-Clause AND BSD 4
4.1.8 BSD-3-Clause AND BSD 4
4.1.7 BSD-3-Clause AND BSD 4
4.1.6 BSD-3-Clause AND BSD 4
4.1.5 BSD-3-Clause AND BSD 5
4.1.4 BSD-3-Clause AND BSD 5
4.1.3 BSD-3-Clause AND BSD 5
4.1.2 BSD-3-Clause AND BSD 5
4.1.1 BSD-3-Clause AND BSD 6
4.1 BSD-3-Clause AND BSD 6
4.0.10 BSD-3-Clause AND BSD 1
4.0.9 BSD-3-Clause AND BSD 1
4.0.8 BSD-3-Clause AND BSD 2
4.0.7 BSD-3-Clause AND BSD 3
4.0.6 BSD-3-Clause AND BSD 3 2022-07-04 - 07:57 over 2 years
4.0.5 BSD-3-Clause AND BSD 4 2022-06-01 - 12:22 over 2 years
4.0.4 BSD-3-Clause AND BSD 4 2022-04-11 - 07:53 over 2 years
4.0.3 BSD-3-Clause AND BSD 4 2022-03-01 - 08:47 over 2 years
4.0.2 BSD-3-Clause AND BSD 4 2022-02-01 - 07:56 almost 3 years
4.0.1 BSD-3-Clause AND BSD 6 2022-01-04 - 09:53 almost 3 years
4.0 BSD-3-Clause AND BSD 6 2021-12-07 - 09:19 almost 3 years
3.2.25 BSD-3-Clause AND BSD
3.2.24 BSD-3-Clause AND BSD 1
3.2.23 BSD-3-Clause AND BSD 1
3.2.22 BSD-3-Clause AND BSD 2
3.2.21 BSD-3-Clause AND BSD 3
3.2.20 BSD-3-Clause AND BSD 4
3.2.19 BSD-3-Clause AND BSD 5
3.2.18 BSD-3-Clause AND BSD 5
3.2.17 BSD-3-Clause AND BSD 5
3.2.16 BSD-3-Clause AND BSD 6
3.2.15 BSD-3-Clause AND BSD 7
3.2.14 BSD-3-Clause AND BSD 7 2022-07-04 - 07:57 over 2 years
3.2.13 BSD-3-Clause AND BSD 8 2022-04-11 - 07:52 over 2 years
3.2.12 BSD-3-Clause AND BSD 8 2022-02-01 - 07:56 almost 3 years
3.2.11 BSD-3-Clause AND BSD 10 2022-01-04 - 09:53 almost 3 years
3.2.10 BSD-3-Clause AND BSD 10 2021-12-07 - 07:34 almost 3 years
3.2.9 BSD-3-Clause AND BSD 10 2021-11-01 - 09:31 about 3 years
3.2.8 BSD-3-Clause AND BSD 10 2021-10-05 - 07:46 about 3 years
3.2.7 BSD-3-Clause AND BSD 10 2021-09-01 - 05:57 about 3 years
3.2.6 BSD-3-Clause AND BSD 10 2021-08-02 - 06:28 over 3 years
3.2.5 BSD-3-Clause AND BSD 10 2021-07-01 - 07:40 over 3 years
3.2.4 BSD-3-Clause AND BSD 10 2021-06-02 - 08:54 over 3 years
3.2.3 BSD-3-Clause AND BSD 11 2021-05-13 - 07:36 over 3 years
3.2.2 BSD-3-Clause AND BSD 11 2021-05-06 - 07:40 over 3 years
3.2.1 BSD-3-Clause AND BSD 11 2021-05-04 - 08:47 over 3 years
3.2 BSD-3-Clause AND BSD 11 2021-04-06 - 09:33 over 3 years
3.1.14 BSD-3-Clause AND BSD 2021-12-07 - 07:34 almost 3 years
3.1.13 BSD-3-Clause AND BSD 2021-07-01 - 07:39 over 3 years
3.1.12 BSD-3-Clause AND BSD 2021-06-02 - 08:53 over 3 years
3.1.11 BSD-3-Clause AND BSD 1 2021-05-13 - 07:36 over 3 years
3.1.10 BSD-3-Clause AND BSD 1 2021-05-06 - 07:40 over 3 years
3.1.9 BSD-3-Clause AND BSD 1 2021-05-04 - 08:47 over 3 years
3.1.8 BSD-3-Clause AND BSD 1 2021-04-06 - 07:34 over 3 years
3.1.7 BSD-3-Clause AND BSD 1 2021-02-19 - 09:08 over 3 years
3.1.6 BSD-3-Clause AND BSD 1 2021-02-01 - 09:28 almost 4 years
3.1.5 BSD-3-Clause AND BSD 2 2021-01-04 - 07:54 almost 4 years
3.1.4 BSD-3-Clause AND BSD 2 2020-12-01 - 06:03 almost 4 years
3.1.3 BSD-3-Clause AND BSD 2 2020-11-02 - 08:12 about 4 years
3.1.2 BSD-3-Clause AND BSD 2 2020-10-01 - 05:38 about 4 years
3.1.1 BSD-3-Clause AND BSD 2 2020-09-01 - 09:14 about 4 years
3.1 BSD-3-Clause AND BSD 4 2020-08-04 - 08:07 over 4 years
3.0.14 BSD 1 2021-04-06 - 07:34 over 3 years
3.0.13 BSD 1 2021-02-19 - 09:08 over 3 years
3.0.12 BSD 1 2021-02-01 - 09:28 almost 4 years