Skip to content
OpenAdvisories
Medium USN-6674-2 1 CVE

python-django vulnerability

Published Mar 4, 2024 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

USN-6674-1 fixed a vulnerability in Django. This update provides
the corresponding update for Ubuntu 18.04 LTS.

Original advisory details:

Seokchan Yoon discovered that the Django Truncator function incorrectly
handled very long HTML input. A remote attacker could possibly use this
issue to cause Django to consume resources, leading to a denial of service.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS python-django 1:1.11.11-1ubuntu1.21+esm4

Vulnerabilities 1

  • Medium 5.3
    CVE-2024-27351

    Regular expression denial-of-service in Django

    In Django 3.2 before 3.2.25, 4.2 before 4.2.11, and 5.0 before 5.0.3, the django.utils.text.Truncator.words() method (with html=True) and the truncatewords_html template filter are subject to a potential regular expression denial-of-service attack via a craft…

    python-django django python-django py3-django Debian Ubuntu Alpine Wolfi PyPI

References

  • report
    https://ubuntu.com/security/CVE-2024-27351