{"action":"Upgrade django to 4.2.16 or later.","affected":[{"fixed":"5.1.1","introduced":"5.1"},{"fixed":"5.0.9","introduced":"5.0"},{"fixed":"4.2.16","introduced":"4.2"}],"component":"django","cve_ids":["CVE-2024-45230"],"ecosystem":"PyPI","epss":0.25773,"exploited":false,"fixed_versions":["5.1.1","5.0.9","4.2.16"],"ghsa_id":"GHSA-5hgc-2vfp-mqvc","id":"tcs_01M5KF12PR10N089JGNTW5GSVS","modified_at":"2024-10-30T19:23:43.662562Z","published_at":"2024-10-08T18:33:13Z","references":["https://osv.dev/vulnerability/GHSA-5hgc-2vfp-mqvc","https://nvd.nist.gov/vuln/detail/CVE-2024-45230","https://github.com/django/django/commit/022ab0a75c76ab2ea31dfcc5f2cf5501e378d397","https://github.com/django/django/commit/813de2672bd7361e9a453ab62cd6e52f96b6525b","https://github.com/django/django/commit/d147a8ebbdf28c17cafbbe2884f0bc57e2bf82e2","https://docs.djangoproject.com/en/dev/releases/security","https://github.com/django/django","https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2024-102.yaml","https://groups.google.com/forum/#%21forum/django-announce","https://www.djangoproject.com/weblog/2024/sep/03/security-releases"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-5hgc-2vfp-mqvc","url":"https://osv.dev/vulnerability/GHSA-5hgc-2vfp-mqvc"}],"summary":"Django vulnerable to denial-of-service attack via the urlize() and urlizetrunc() template filters"}