Lucene search
+L

4688 matches found

RedhatCVE
RedhatCVE
added 2025/05/10 9:20 a.m.27 views

CVE-2025-1252

Heap-based Buffer Overflow vulnerability in RTI Connext Professional Core Libraries allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before 7.3.0.7, from 4.4 before 6.1.2.23...

7.1CVSS7AI score0.00151EPSS
SaveExploits0References3
SUSE Linux
SUSE Linux
added 2025/05/09 11:27 a.m.8 views

Security update for python-Django

This update for python-Django fixes the following issues: CVE-2025-32873: Fixed denial-of-service possibility in striptags bsc1242210 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run t...

5.9CVSS6.8AI score0.13624EPSS
SaveExploits0References4
OSV
OSV
added 2025/05/09 11:27 a.m.7 views

SUSE-SU-2025:1523-1 Security update for python-Django

This update for python-Django fixes the following issues: - CVE-2025-32873: Fixed denial-of-service possibility in striptags bsc1242210...

5.3CVSS6.7AI score0.13624EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2025/05/08 11:41 a.m.7 views

SUSE CVE-2025-32873

An issue was discovered in Django 4.2 before 4.2.21, 5.1 before 5.1.9, and 5.2 before 5.2.1. The django.utils.html.striptags function is vulnerable to a potential denial-of-service slow performance when processing inputs containing large sequences of incomplete HTML tags. The template filter...

5.9CVSS6.9AI score0.13624EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
added 2025/05/08 6:30 a.m.14 views

Django has a denial-of-service possibility in strip_tags()

An issue was discovered in Django 4.2 before 4.2.21, 5.1 before 5.1.9, and 5.2 before 5.2.1. The django.utils.html.striptags function is vulnerable to a potential denial-of-service slow performance when processing inputs containing large sequences of incomplete HTML tags. The template filter...

5.3CVSS5.2AI score0.13624EPSS
SaveExploits0References8Affected Software1
OSV
OSV
added 2025/05/08 6:30 a.m.14 views

GHSA-8J24-CJRQ-GR2M Django has a denial-of-service possibility in strip_tags()

An issue was discovered in Django 4.2 before 4.2.21, 5.1 before 5.1.9, and 5.2 before 5.2.1. The django.utils.html.striptags function is vulnerable to a potential denial-of-service slow performance when processing inputs containing large sequences of incomplete HTML tags. The template filter...

5.3CVSS6.8AI score0.13624EPSS
SaveExploits0References8
OSV
OSV
added 2025/05/08 4:17 a.m.9 views

PYSEC-2025-37

An issue was discovered in Django 4.2 before 4.2.21, 5.1 before 5.1.9, and 5.2 before 5.2.1. The django.utils.html.striptags function is vulnerable to a potential denial-of-service slow performance when processing inputs containing large sequences of incomplete HTML tags. The template filter...

5.3CVSS6.8AI score0.13624EPSS
SaveExploits0References5
PyPA
PyPA
added 2025/05/08 4:17 a.m.14 views

PYSEC-2025-37

An issue was discovered in Django 4.2 before 4.2.21, 5.1 before 5.1.9, and 5.2 before 5.2.1. The django.utils.html.striptags function is vulnerable to a potential denial-of-service slow performance when processing inputs containing large sequences of incomplete HTML tags. The template filter...

5.3CVSS7AI score0.13624EPSS
SaveExploits0References5Affected Software1
Snyk
Snyk
added 2025/05/08 3:42 a.m.8 views

Allocation of Resources Without Limits or Throttling

Overview Django is a high-level Python Web framework that encourages rapid development and clean, pragmatic design. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the striptags function. An attacker can cause slow performance by...

6.9CVSS6.8AI score0.13624EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/05/08 12:00 a.m.22 views

CVE-2025-32873

An issue was discovered in Django 4.2 before 4.2.21, 5.1 before 5.1.9, and 5.2 before 5.2.1. The django.utils.html.striptags function is vulnerable to a potential denial-of-service slow performance when processing inputs containing large sequences of incomplete HTML tags. The template filter...

5.3CVSS0.13624EPSS
SaveExploits0References3
AlpineLinux
AlpineLinux
added 2025/05/08 12:00 a.m.21 views

CVE-2025-32873

An issue was discovered in Django 4.2 before 4.2.21, 5.1 before 5.1.9, and 5.2 before 5.2.1. The django.utils.html.striptags function is vulnerable to a potential denial-of-service slow performance when processing inputs containing large sequences of incomplete HTML tags. The template filter...

5.3CVSS7.1AI score0.13624EPSS
SaveExploits0
CVE
CVE
added 2025/05/08 12:00 a.m.250 views

CVE-2025-32873

CVE-2025-32873 affects Django: vulnerable in Django 4.2 before 4.2.21, 5.1 before 5.1.9, and 5.2 before 5.2.1. The issue is in django.utils.html.strip_tags(), which can be exploited to cause a denial-of-service (slow performance) when processing inputs containing large sequences of incomplete HTM...

5.3CVSS5.1AI score0.13624EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2025/05/08 12:00 a.m.11 views

CVE-2025-32873

An issue was discovered in Django 4.2 before 4.2.21, 5.1 before 5.1.9, and 5.2 before 5.2.1. The django.utils.html.striptags function is vulnerable to a potential denial-of-service slow performance when processing inputs containing large sequences of incomplete HTML tags. The template filter...

5.3CVSS5.1AI score0.13624EPSS
SaveExploits0References3
OSV
OSV
added 2025/05/08 12:00 a.m.11 views

CVE-2025-32873

An issue was discovered in Django 4.2 before 4.2.21, 5.1 before 5.1.9, and 5.2 before 5.2.1. The django.utils.html.striptags function is vulnerable to a potential denial-of-service slow performance when processing inputs containing large sequences of incomplete HTML tags. The template filter...

5.3CVSS6.4AI score
SaveExploits0References6
Ubuntu
Ubuntu
added 2025/05/07 3:22 p.m.16 views

USN-7501-1: Django vulnerability

Elias Myllymäki discovered that Django incorrectly handled stripping large sequences of incomplete HTML tags. A remote attacker could possibly use this issue to cause Django to consume resources, leading to a denial of service...

5.3CVSS6.8AI score0.13624EPSS
SaveExploits0
OSV
OSV
added 2025/05/07 3:22 p.m.8 views

USN-7501-1 python-django vulnerability

Elias Myllymäki discovered that Django incorrectly handled stripping large sequences of incomplete HTML tags. A remote attacker could possibly use this issue to cause Django to consume resources, leading to a denial of service...

5.3CVSS7.2AI score0.13624EPSS
SaveExploits0References2
OSV
OSV
added 2025/05/07 2:00 p.m.7 views

UBUNTU-CVE-2025-32873

An issue was discovered in Django 4.2 before 4.2.21, 5.1 before 5.1.9, and 5.2 before 5.2.1. The django.utils.html.striptags function is vulnerable to a potential denial-of-service slow performance when processing inputs containing large sequences of incomplete HTML tags. The template filter...

5.3CVSS7.1AI score0.13624EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/05/07 12:00 a.m.8 views

PT-2025-20317

Name of the Vulnerable Software and Affected Versions Django versions 4.2 through 4.2.20 Django versions 5.1 through 5.1.8 Django versions 5.2 through 5.2.0 Description An issue was discovered in Django, where the django.utils.html.strip tags function is vulnerable to a potential denial-of-servic...

7.5CVSS6.7AI score0.13624EPSS
SaveExploits0References148
Veracode
Veracode
added 2025/05/06 1:31 p.m.19 views

Denial Of Service (DoS)

python-markdownify is vulnerable to Denial Of Service DoS. The vulnerability is due to memory exhaustion due to handling excessively large HTML headline tags like , which consume significant memory during processing...

3.3CVSS6.8AI score0.00206EPSS
SaveExploits1References5Affected Software1
Snyk
Snyk
added 2025/04/26 9:41 p.m.9 views

Allocation of Resources Without Limits or Throttling

Overview markdownify is a Convert HTML to markdown. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling when processing malformed HTML tags. An attacker can cause excessive memory consumption by causing heading tags with very large values to be...

6.9CVSS6.8AI score0.00206EPSS
SaveExploits1References2
Rows per page
Query Builder