OESA-2024-2540 python-django security update

🗓️ 13 Dec 2024 13:18:39Reported by GoogleType

osv🔗 osv.dev👁 1 Views

Django security update fixes DoS from nested HTML entities in strip_tags filters and data danger from json key check

Reporter	Title	Published	Views	Family All 136
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to Django-4.2.15-py3-none-any.whl CVE-2024-45231	12 Mar 202521:43	–	ibm
IBM Security Bulletins	Security Bulletin: Denial of service, SQL injection, and other vulnerabilities might affect IBM Storage Defender – Resiliency Service	24 Feb 202523:37	–	ibm
AlpineLinux	CVE-2024-53907	6 Dec 202400:00	–	alpinelinux
AlpineLinux	CVE-2024-53908	6 Dec 202400:00	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в python-django	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of the django.db.models.fields.json class in the Django web application framework allows an attacker to execute arbitrary SQL code.	9 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the strip_tags() function in the django.utils.html module of the Django software framework allows a attacker to cause a denial-of-service attack.	21 Dec 202400:00	–	bdu_fstec
Chainguard	CVE-2024-53907 vulnerabilities	6 Dec 202412:15	–	cgr
Chainguard	CVE-2024-53908 vulnerabilities	6 Dec 202412:15	–	cgr
Circl	CVE-2024-53907	6 Dec 202411:48	–	circl

Source	Link
openeuler	www.openeuler.org/zh/security/security-bulletins/detail/
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-53907
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-53908

03 Sep 2025 06:20Current

7.6High risk

Vulners AI Score7.6

CVSS 3.19.8

EPSS0.01038

SSVC