CVE-2018-7536

2 advisories.

PyPI/django CVE-2018-7536: medium 5.3, EPSS 4.55%

Django denial-of-service possibility in urlize and urlizetrunc template filters

Action: Upgrade django to 1.8.19 or later.

pip install django==2.0.3

pip install django==1.11.11

pip install django==1.8.19

Affected

introduced	fixed	last affected
2.0a1	2.0.3	-
1.11a1	1.11.11	-
1.8a1	1.8.19	-

Fixed versions

2.0.3

1.11.11

1.8.19

Sources

CVE-2018-7536 · published 2019-01-04T17:50:07Z · modified 2024-09-18T20:09:50.350214Z · JSON

PyPI/django CVE-2018-7536: unknown, EPSS 4.55%

An issue was discovered in Django 2.0 before 2.0.3, 1.11 before 1.11.11, and 1.8 before 1.8.19. The django.utils.html.urlize() function was extremely slow to evaluate certain inputs due to catastrophi