← Database

CVE-2024-41991

HIGH CVSS: 7.5 Published: 2024-08-07 Modified: 2026-06-17

Description

An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize and urlizetrunc template filters, and the AdminURLFieldWidget widget, are subject to a potential denial-of-service attack via certain inputs with a very large number of Unicode characters.

Affected Platforms

Djangoproject Django

Weakness Type

CWE-1284, CWE-130

References