FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

Django -- multiple vulnerabilities

Affected packages
py310-django32 < 3.2.25
py311-django32 < 3.2.25
py39-django32 < 3.2.25
py310-django42 < 4.2.11
py311-django42 < 4.2.11
py39-django42 < 4.2.11
py310-django50 < 5.0.3
py311-django50 < 5.0.3

Details

VuXML ID 0ef3398e-da21-11ee-b23a-080027a5b8e9
Discovery 2024-02-25
Entry 2024-03-04

Django reports:

CVE-2024-27351: Potential regular expression denial-of-service in django.utils.text.Truncator.words().

[source]

References

CVE Name CVE-2024-27351
URL https://www.djangoproject.com/weblog/2024/mar/04/security-releases/

Copyright © 2003-2005 Jacques Vidrine and contributors.
Please see the source of this document for full copyright information.