PYSEC-2025-13

See a problem?

Import Source

https://github.com/pypa/advisory-database/blob/main/vulns/django/PYSEC-2025-13.yaml

JSON Data

https://api.osv.dev/v1/vulns/PYSEC-2025-13

Aliases

Published

2025-03-06T19:15:27Z

Modified

2025-04-09T17:59:24.177940Z

Summary

[none]

Details

An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap() method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings.

References

Affected packages

PyPI / django

Package

Name: django; View open source insights on deps.dev
Purl: pkg:pypi/django

Affected ranges

Type: ECOSYSTEM
Events: Introduced

5.1

Fixed

5.1.7

Introduced

5.0

Fixed

5.0.13

Introduced

4.2

Fixed

4.2.20

Affected versions

4.*

4.2

4.2.1

4.2.2

4.2.3

4.2.4

4.2.5

4.2.6

4.2.7

4.2.8

4.2.9

4.2.10

4.2.11

4.2.12

4.2.13

4.2.14

4.2.15

4.2.16

4.2.17

4.2.18

4.2.19

5.*

5.0

5.0.1

5.0.2

5.0.3

5.0.4

5.0.5

5.0.6

5.0.7

5.0.8

5.0.9

5.0.10

5.0.11

5.0.12

5.1

5.1.1

5.1.2

5.1.3

5.1.4

5.1.5

5.1.6