Django has a denial-of-service possibility in strip_tags()

🗓️ 08 May 2025 06:30:33Reported by GitHub Advisory DatabaseType

Django has a vulnerability in strip_tags function, leading to potential denial-of-service attacks.

Reporter	Title	Published	Views	Family All 97
IBM Security Bulletins	Security Bulletin: A denial-of-service attack, heap use after free, network server exploit, and other vulnerabilities might affect IBM Storage Defender - Resiliency Service	8 Jul 202517:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to Django-4.2.20-py3-none-any.whl CVE-2025-32873	9 Oct 202510:22	–	ibm
AlpineLinux	CVE-2025-32873	8 May 202500:00	–	alpinelinux
ArchLinux	[ASA-202505-10] python-django: denial of service	19 May 202500:00	–	archlinux
Chainguard	CVE-2025-32873 vulnerabilities	14 May 202519:15	–	cgr
Circl	CVE-2025-32873	7 May 202513:06	–	circl
CNNVD	Django 安全漏洞	8 May 202500:00	–	cnnvd
CVE	CVE-2025-32873	8 May 202500:00	–	cve
Cvelist	CVE-2025-32873	8 May 202500:00	–	cvelist
Debian	[BSA-124] Security Update for python-django	26 May 202501:05	–	debian

Vulners

Node

django_project djangoRange4.2–4.2.21pip

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-32873
docs	www.docs.djangoproject.com/en/dev/releases/security
groups	www.groups.google.com/g/django-announce
djangoproject	www.djangoproject.com/weblog/2025/may/07/security-releases
openwall	www.openwall.com/lists/oss-security/2025/05/07/1
github	www.github.com/django/django/commit/9f3419b519799d69f2aba70b9d25abe2e70d03e0
github	www.github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2025-37.yaml
github	www.github.com/advisories/GHSA-8j24-cjrq-gr2m

08 May 2025 14:53Current

5.2Medium risk

Vulners AI Score5.2

CVSS 3.15.3

EPSS0.00188

SSVC