Skip to content
OpenAdvisories
High DLA-4006-1 1 CVE

python-django - security update

Published Dec 31, 2024 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 python-django 2:2.2.28-1~deb11u3

Vulnerabilities 1

  • High 7.5
    CVE-2024-53907

    Django denial-of-service in django.utils.html.strip_tags()

    An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. The strip_tags() method and striptags template filter are subject to a potential denial-of-service attack via certain inputs containing large sequences of nested inc…

    python-django django python-django py3-django Debian Ubuntu Alpine Wolfi PyPI