Skip to content
OpenAdvisories
Medium USN-7205-2 1 CVE

python-django vulnerability

Published Jan 23, 2025 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

USN-7205-1 fixed a vulnerability in Django. This update provides
the corresponding update for Ubuntu 18.04 LTS.

Original advisory details:

It was discovered that Django incorrectly handled certain IPv6
strings. An attacker could possibly use this issue to cause a
denial of service.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS python-django 1:1.11.11-1ubuntu1.21+esm9

Vulnerabilities 1

  • Medium 5.8
    CVE-2024-56374

    Django has a potential denial-of-service vulnerability in IPv6 validation

    An issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18. Lack of upper-bound limit enforcement in strings passed when performing IPv6 validation could lead to a potential denial-of-service attack. The undocumented and priv…

    djangoproject Django python-django django Debian Ubuntu Alpine Wolfi PyPI

References

  • report
    https://ubuntu.com/security/CVE-2024-56374