Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to Django-4.2.20-py3-none-any.whl CVE-2025-32873

Summary IBM Maximo Application Suite - Monitor Component is vulnerable to Django-4.2.20-py3-none-any.whl CVE-2025-32873. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2025-32873 DESCRIPTION: An issue was discovered in Django 4.2 before...

Linux Distros Unpatched Vulnerability : CVE-2025-32873

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Django 4.2 before 4.2.21, 5.1 before 5.1.9, and 5.2 before 5.2.1. The django.utils.html.striptags function is vulnerable to a potenti...

Fedora: Security Advisory (FEDORA-2025-2dff80a8a3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-ad58eb378b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-6de2ab1d25)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 42 : python-django5 (2025-ad58eb378b)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-ad58eb378b advisory. - Fixes CVE-2025-32873: Denial-of-service possibility in striptags - Fixes CVE-2025-48432: Potential log injection via unescaped request path Tenabl...

Fedora 41 : python-django5 (2025-2dff80a8a3)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-2dff80a8a3 advisory. - Fixes CVE-2025-32873: Denial-of-service possibility in striptags - Fixes CVE-2025-48432: Potential log injection via unescaped request path Tenabl...

Fedora 42 : python-django4.2 (2025-6de2ab1d25)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-6de2ab1d25 advisory. - Fixes CVE-2025-32873: Denial-of-service possibility in striptags - Fixes CVE-2025-48432: Potential log injection via unescaped request path Tenabl...

Fedora 41 : python-django4.2 (2025-d4849e6cf3)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-d4849e6cf3 advisory. - Fixes CVE-2025-32873: Denial-of-service possibility in striptags - Fixes CVE-2025-48432: Potential log injection via unescaped request path Tenabl...

Fedora: Security Advisory (FEDORA-2025-d4849e6cf3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15 Security Update : python-Django (SUSE-SU-2025:01523-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2025:01523-1 advisory. - CVE-2025-32873: Fixed denial-of-service possibility in striptags bsc1242210 Tenable has extracted the preceding description block directly from the...

[BSA-124] Security Update for python-django

Colin Watson uploaded new packages for python-django which fixed the following security problems: CVE-2025-32873...

SUSE-SU-2025:01523-1 Security update for python-Django

This update for python-Django fixes the following issues: - CVE-2025-32873: Fixed denial-of-service possibility in striptags bsc1242210...

CVE-2025-32873 vulnerabilities

Vulnerabilities for packages: grafana-oncall...

CVE-2025-32873 vulnerabilities

Vulnerabilities for packages: awx, grafana-oncall...

python311-Django4-4.2.21-1.1 on GA media (moderate)

python311-Django4-4.2.21-1.1 on GA media Announcement ID: openSUSE-SU-2025:15082-1 Rating: moderate Cross-References: CVE-2025-32873 CVSS scores: CVE-2025-32873 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability c...

openSUSE Security Advisory (SUSE-SU-2025:1523-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated python-django packages fix security vulnerability

An issue was discovered in Django 4.2 before 4.2.21, 5.1 before 5.1.9, and 5.2 before 5.2.1. The django.utils.html.striptags function is vulnerable to a potential denial-of-service slow performance when processing inputs containing large sequences of incomplete HTML tags. The template filter...

SUSE SLES15 / openSUSE 15 Security Update : python-Django (SUSE-SU-2025:1523-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:1523-1 advisory. - CVE-2025-32873: Fixed denial-of-service possibility in striptags bsc1242210 Tenable has extracted the preceding description block direct...

SUSE-SU-2025:1523-1 Security update for python-Django

This update for python-Django fixes the following issues: - CVE-2025-32873: Fixed denial-of-service possibility in striptags bsc1242210...