Skip to content
OpenAdvisories
Medium USN-7205-1 1 CVE

python-django vulnerability

Published Jan 14, 2025 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Django incorrectly handled certain IPv6
strings. An attacker could possibly use this issue to cause a
denial of service.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS python-django 2:2.2.12-1ubuntu0.27
Ubuntu · 22.04 LTS 22.04:LTS python-django 2:3.2.12-2ubuntu1.16
Ubuntu · 24.04 LTS 24.04:LTS python-django 3:4.2.11-1ubuntu1.5

Vulnerabilities 1

  • Medium 5.8
    CVE-2024-56374

    Django has a potential denial-of-service vulnerability in IPv6 validation

    An issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18. Lack of upper-bound limit enforcement in strings passed when performing IPv6 validation could lead to a potential denial-of-service attack. The undocumented and priv…

    djangoproject Django python-django django Debian Ubuntu Alpine Wolfi PyPI

References

  • report
    https://ubuntu.com/security/CVE-2024-56374