CVE-2023-43665

2 advisories.

PyPI/django CVE-2023-43665: medium 5.9, EPSS 1.46%

Django Denial-of-service in django.utils.text.Truncator

Action: Upgrade django to 3.2.22 or later.

pip install django==3.2.22

pip install django==4.1.12

pip install django==4.2.6

Affected

introduced	fixed	last affected
3.2a1	3.2.22	-
4.1a1	4.1.12	-
4.2a1	4.2.6	-

Fixed versions

3.2.22

4.1.12

4.2.6

Sources

CVE-2023-43665 · published 2023-11-03T06:36:30Z · modified 2025-11-04T20:42:38.556437Z · JSON

PyPI/django CVE-2023-43665: unknown, EPSS 1.46%

In Django 3.2 before 3.2.22, 4.1 before 4.1.12, and 4.2 before 4.2.6, the django.utils.text.Truncator chars() and words() methods (when used with html=True) are subject to a potential DoS (denial of s