PYSEC-2024-67

See a problem?

Import Source

https://github.com/pypa/advisory-database/blob/main/vulns/django/PYSEC-2024-67.yaml

JSON Data

https://api.osv.dev/v1/vulns/PYSEC-2024-67

Aliases

Published

2024-08-07T15:15:00Z

Modified

2024-08-08T08:11:55.573131Z

Summary

[none]

Details

An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The floatformat template filter is subject to significant memory consumption when given a string representation of a number in scientific notation with a large exponent.

References

Affected packages

PyPI / django

Package

Name: django; View open source insights on deps.dev
Purl: pkg:pypi/django

Affected ranges

Type: ECOSYSTEM
Events: Introduced

5.0

Fixed

5.0.8

Introduced

4.2

Fixed

4.2.15

Affected versions

4.*

4.2

4.2.1

4.2.2

4.2.3

4.2.4

4.2.5

4.2.6

4.2.7

4.2.8

4.2.9

4.2.10

4.2.11

4.2.12

4.2.13

4.2.14

5.*

5.0

5.0.1

5.0.2

5.0.3

5.0.4

5.0.5

5.0.6

5.0.7

Database specific

source

"https://github.com/pypa/advisory-database/blob/main/vulns/django/PYSEC-2024-67.yaml"