tocsin

PyPI/django CVE-2024-24680: unknown, EPSS 1.61%

An issue was discovered in Django 3.2 before 3.2.24, 4.2 before 4.2.10, and Django 5.0 before 5.0.2. The intcomma template filter was subject to a potential denial-of-service attack when used with ver

Action: Upgrade django to 3.2.24 or later.

pip install django==3.2.24
pip install django==4.2.10
pip install django==5.0.2

Affected

introducedfixedlast affected
3.23.2.24-
4.24.2.10-
5.05.0.2-

Fixed versions

3.2.244.2.105.0.2

Sources

CVE-2024-24680 · published · modified · JSON