{"action":"Upgrade django to 1.8.19 or later.","affected":[{"fixed":"2.0.3","introduced":"2.0"},{"fixed":"1.11.11","introduced":"1.11"},{"fixed":"1.8.19","introduced":"1.8"}],"component":"django","cve_ids":["CVE-2018-7537"],"ecosystem":"PyPI","epss":0.04374,"exploited":false,"fixed_versions":["2.0.3","1.11.11","1.8.19"],"ghsa_id":"GHSA-2f9x-5v75-3qv4","id":"tcs_01M5KESFGQNJF9PE6G121HSJE9","modified_at":"2024-11-27T05:25:46.502161Z","published_at":"2019-01-04T17:50:00Z","references":["https://osv.dev/vulnerability/GHSA-2f9x-5v75-3qv4","https://nvd.nist.gov/vuln/detail/CVE-2018-7537","https://github.com/django/django/commit/94c5da1d17a6b0d378866c66b605102c19f7988c","https://github.com/django/django/commit/a91436360b79a6ff995c3e5018bcc666dfaf1539","https://github.com/django/django/commit/d17974a287a6ea2e361daff88fcc004cbd6835fa","https://access.redhat.com/errata/RHSA-2018:2927","https://access.redhat.com/errata/RHSA-2019:0265","https://github.com/advisories/GHSA-2f9x-5v75-3qv4","https://github.com/django/django","https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2018-6.yaml","https://lists.debian.org/debian-lts-announce/2018/03/msg00006.html","https://usn.ubuntu.com/3591-1","https://www.debian.org/security/2018/dsa-4161","https://www.djangoproject.com/weblog/2018/mar/06/security-releases"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-2f9x-5v75-3qv4","url":"https://osv.dev/vulnerability/GHSA-2f9x-5v75-3qv4"}],"summary":"Django Denial-of-service possibility in truncatechars_html and truncatewords_html template filters"}