Denial Of Service (DoS)

Django is vulnerable to a denial-of-service DoS attack. The vulnerability is due to the striptags method and striptags template filter failing to handle inputs with large sequences of nested incomplete HTML entities, allowing an attacker to perform a DoS attack with specially crafted inputs...

Timing Attack

Overview django-allauth is an integrated set of Django applications addressing authentication, registration, account management as well as 3rd party social account authentication. Affected versions of this package are vulnerable to Timing Attack in the AuthenticationBackend.authenticatebyemail...

PT-2025-51216

Name of the Vulnerable Software and Affected Versions allauth-django versions prior to 65.13.0 Description An issue exists in allauth-django where Okta and NetIQ were utilizing the preferred username value as an identifier for third-party provider accounts. This value is mutable and should not be...

PT-2025-51215

Name of the Vulnerable Software and Affected Versions allauth-django versions prior to 65.13.0 Description An issue existed where access and refresh tokens were not rejected after a user was marked as inactive. Specifically, if a user’s account was deactivated is active=False after tokens had...

[SECURITY] [DLA 4006-1] python-django security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4006-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb December 31, 2024 https://wiki.debian.org/LTS -...

DLA-4006-1 python-django - security update

Bulletin has no description...

Debian dla-4006 : python-django-doc - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4006 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4006-1 [email protected] https://www.debian.org/lts/security/...

CVE-2024-56363 APTRS has SSTI vulnerability

APTRS Automated Penetration Testing Reporting System is a Python and Django-based automated reporting tool designed for penetration testers and security organizations. In 1.0, there is a vulnerability in the web application's handling of user-supplied input that is incorporated into a Jinja2...

CVE-2024-56363 APTRS has SSTI vulnerability

APTRS Automated Penetration Testing Reporting System is a Python and Django-based automated reporting tool designed for penetration testers and security organizations. In 1.0, there is a vulnerability in the web application's handling of user-supplied input that is incorporated into a Jinja2...

APTRS 安全漏洞

APTRS Automated Penetration Testing Reporting System is a Python and Django based automated reporting tool from APTRS open source. Designed for penetration testers and security organizations. A security vulnerability exists in version 1.0 of APTRS, which stems from improper input cleanup in a web...

The vulnerability of the strip_tags() function in the django.utils.html module of the Django software framework allows a attacker to cause a denial-of-service attack.

The vulnerability of the striptags function in the django.utils.html module of the Django software framework relates to unlimited resource allocation due to improper escaping of HTML characters. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending special...

Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Container Release Update

An update is now available for Red Hat Ansible Automation Platform 2.5 Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams,...

OPENSUSE-SU-2024:0408-1 Security update for python-Django

This update for python-Django fixes the following issues: - CVE-2024-53907: Fixed potential denial-of-service in django.utils.html.striptags boo1234232...

Security update for python-Django (moderate)

openSUSE Security Update: Security update for python-Django Announcement ID: openSUSE-SU-2024:0408-1 Rating: moderate References: 1234232 Cross-References: CVE-2024-53907 CVSS scores: CVE-2024-53907 SUSE: 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports...

OESA-2024-2539 python-django security update

A high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fixes: A vulnerability was found in the Django Web Framework. The striptags and stripbtags template filter may be vulnerable to a potential denial of service DoS in cases of a large sequence ...

OESA-2024-2541 python-django security update

A high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fixes: A vulnerability was found in the Django Web Framework. The striptags and stripbtags template filter may be vulnerable to a potential denial of service DoS in cases of a large sequence ...

OESA-2024-2540 python-django security update

A high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fixes: A vulnerability was found in the Django Web Framework. The striptags and stripbtags template filter may be vulnerable to a potential denial of service DoS in cases of a large sequence ...

OESA-2024-2542 python-django security update

A high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fixes: A vulnerability was found in the Django Web Framework. The striptags and stripbtags template filter may be vulnerable to a potential denial of service DoS in cases of a large sequence ...

OESA-2024-2543 python-django security update

A high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fixes: A vulnerability was found in the Django Web Framework. The striptags and stripbtags template filter may be vulnerable to a potential denial of service DoS in cases of a large sequence ...

SUSE SLES15 / openSUSE 15 Security Update : python-Django (SUSE-SU-2024:4285-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4285-1 advisory. - CVE-2024-53907: Fixed denial-of-service in django.utils.html.striptags bsc1234232 - CVE-2024-53908: Fixed SQL injection in...