Skip to content
OpenAdvisories
Medium USN-7335-1 1 CVE

python-django vulnerability

Published Mar 6, 2025 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Django incorrectly handled text wrapping. An
attacker could possibly use this issue to cause a denial of service.

Fixed packages 4

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS python-django 2:2.2.12-1ubuntu0.28
Ubuntu · 22.04 LTS 22.04:LTS python-django 2:3.2.12-2ubuntu1.17
Ubuntu · 24.04 LTS 24.04:LTS python-django 3:4.2.11-1ubuntu1.6
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS python-django 1:1.11.11-1ubuntu1.21+esm10

Vulnerabilities 1

  • Medium 5.0
    CVE-2025-26699

    Django Vulnerable to Allocation of Resources Without Limits or Throttling

    An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap() method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings.

    djangoproject Django python-django django Debian Ubuntu Alpine PyPI

References

  • report
    https://ubuntu.com/security/CVE-2025-26699