ALT-PU-2025-4236-4

Package update python3-module-django in branch p11

Version4.2.20-alt1

Published2026-02-04

Max severityHIGH

Severity:

Closed issues (3)

MEDIUM5.0

Уязвимость программной платформы для веб-приложений Django, связанная с недостаточной проверкой входных данных, позволяющая нарушителю вызвать отказ в обслуживании

Published: 2025-07-16Modified: 2025-10-24

CVSS 3.xMEDIUM 5.0

CVSS:3.x/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L

CVSS 2.0MEDIUM 4.0

CVSS:2.0/AV:N/AC:L/Au:S/C:N/I:N/A:P

References

CVE-2025-26699

HIGH7.5

An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap() method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings.

Published: 2025-03-06Modified: 2025-10-03

CVSS 3.xHIGH 7.5

CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

GHSA-p3fp-8748-vqfq

MEDIUM5.0

Django vulnerable to Allocation of Resources Without Limits or Throttling

Published: 2025-03-07Modified: 2025-04-09

CVSS 3.xMEDIUM 5.0

CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L

References