CVE-2024-27351

2 advisories.

PyPI/django CVE-2024-27351: medium 5.3, EPSS 1.85%

Regular expression denial-of-service in Django

Action: Upgrade django to 3.2.25 or later.

pip install django==3.2.25

pip install django==4.2.11

pip install django==5.0.3

Affected

introduced	fixed	last affected
3.2	3.2.25	-
4.2	4.2.11	-
5.0	5.0.3	-

Fixed versions

3.2.25

4.2.11

5.0.3

Sources

CVE-2024-27351 · published 2024-03-15T21:30:43Z · modified 2026-09-10T03:50:10.784705170Z · JSON

PyPI/django CVE-2024-27351: unknown, EPSS 1.85%

In Django 3.2 before 3.2.25, 4.2 before 4.2.11, and 5.0 before 5.0.3, the django.utils.text.Truncator.words() method (with html=True) and the truncatewords_html template filter are subject to a potent