15990 matches found
Ubuntu: Security Advisory (USN-7205-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-56374
A flaw was found in the Django framework. Lack of upper bound limit enforcement in strings passed when performing IPv6 validation could lead to a potential denial of service attack. The undocumented and private functions cleanipv6address and isvalidipv6address were vulnerable, as was the...
GHSA-QCGG-J2X8-H9G8 vulnerabilities
Vulnerabilities for packages: py3-django...
GHSA-QCGG-J2X8-H9G8 vulnerabilities
Vulnerabilities for packages: py3-django, awx...
Django has a potential denial-of-service vulnerability in IPv6 validation
An issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18. Lack of upper-bound limit enforcement in strings passed when performing IPv6 validation could lead to a potential denial-of-service attack. The undocumented and private functions cleanipv6address and...
GHSA-QCGG-J2X8-H9G8 Django has a potential denial-of-service vulnerability in IPv6 validation
An issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18. Lack of upper-bound limit enforcement in strings passed when performing IPv6 validation could lead to a potential denial-of-service attack. The undocumented and private functions cleanipv6address and...
aldryn-django (>=5.0.2.0, <=5.0.10.0), artd-customer (>=0.0.20, <=0.0.23) +78 more potentially affected by CVE-2024-56374 via django (>=5.0.0, <=5.0.10)
django PYPI version =5.0.0, =5.0.2.0, =0.0.20, =0.0.13, =0.0.19, =0.0.34, =0.0.50, =0.0.5, =0.0.11, =1.0.3, =0.1.0, =0.1.0, =1.0.0, =6.0.0, =6.3.3 and more Source cves: CVE-2024-56374 Source advisory: OSV:GHSA-QCGG-J2X8-H9G8...
admin-auth0 (>=0.1.1, <=0.1.5), alcali (3006.3.0) +139 more potentially affected by CVE-2024-56374 via django (>=4.2.0, <=4.2.17)
django PYPI version =4.2.0, =0.1.1, =4.2.6.0, =65.10.0, =7.5.0a0, =1.1.0a0, =1.0.2, =0.0.1, =1.3.9, =0.4.0, =4.16.2, =4.8.0, =4.17.1 and more Source cves: CVE-2024-56374 Source advisory: GHSA-QCGG-J2X8-H9G8...
aldryn-django (5.1.4.0), app-parcheggi-backup (>=1.0.0, <=1.0.1) +38 more potentially affected by CVE-2024-56374 via django (>=5.1.0, <=5.1.4)
django PYPI version =5.1.0, =1.0.0, =0.2.0a1, =0.1.6, =0.0.3, =0.0.15, =2.7.0, =0.92.0, =1.0.3, =0.6.2, =0.7.0 - django-pesapal 2.0.0 - django-qr-toolkit-core 4.2.3 and more Source cves: CVE-2024-56374 Source advisory: GHSA-QCGG-J2X8-H9G8...
admin-auth0 (>=0.1.1, <=0.1.5), alcali (3006.3.0) +139 more potentially affected by CVE-2024-56374 via django (>=4.2.0, <=4.2.17)
django PYPI version =4.2.0, =0.1.1, =4.2.6.0, =65.10.0, =7.5.0a0, =1.1.0a0, =1.0.2, =0.0.1, =1.3.9, =0.4.0, =4.16.2, =4.8.0, =4.17.1 and more Source cves: CVE-2024-56374 Source advisory: OSV:GHSA-QCGG-J2X8-H9G8...
aldryn-django (5.1.4.0), app-parcheggi-backup (>=1.0.0, <=1.0.1) +38 more potentially affected by CVE-2024-56374 via django (>=5.1.0, <=5.1.4)
django PYPI version =5.1.0, =1.0.0, =0.2.0a1, =0.1.6, =0.0.3, =0.0.15, =2.7.0, =0.92.0, =1.0.3, =0.6.2, =0.7.0 - django-pesapal 2.0.0 - django-qr-toolkit-core 4.2.3 and more Source cves: CVE-2024-56374 Source advisory: OSV:GHSA-QCGG-J2X8-H9G8...
aldryn-django (>=5.0.2.0, <=5.0.10.0), artd-customer (>=0.0.20, <=0.0.23) +78 more potentially affected by CVE-2024-56374 via django (>=5.0.0, <=5.0.10)
django PYPI version =5.0.0, =5.0.2.0, =0.0.20, =0.0.13, =0.0.19, =0.0.34, =0.0.50, =0.0.5, =0.0.11, =1.0.3, =0.1.0, =0.1.0, =1.0.0, =6.0.0, =6.3.3 and more Source cves: CVE-2024-56374 Source advisory: GHSA-QCGG-J2X8-H9G8...
CVE-2024-56374 vulnerabilities
Vulnerabilities for packages: py3-django...
CVE-2024-56374
An issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18. Lack of upper-bound limit enforcement in strings passed when performing IPv6 validation could lead to a potential denial-of-service attack. The undocumented and private functions cleanipv6address and...
PYSEC-2025-1
An issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18. Lack of upper-bound limit enforcement in strings passed when performing IPv6 validation could lead to a potential denial-of-service attack. The undocumented and private functions cleanipv6address and...
PYSEC-2025-1
An issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18. Lack of upper-bound limit enforcement in strings passed when performing IPv6 validation could lead to a potential denial-of-service attack. The undocumented and private functions cleanipv6address and...
Denial of Service (DoS)
Overview Django is a high-level Python Web framework that encourages rapid development and clean, pragmatic design. Affected versions of this package are vulnerable to Denial of Service DoS through the cleanipv6address and isvalidipv6address functions, as well as the GenericIPAddressField form...
Denial of Service (DoS)
Overview Affected versions of this package are vulnerable to Denial of Service DoS through the cleanipv6address and isvalidipv6address functions, as well as the GenericIPAddressField form field due to improper length validation. An attacker can cause the application to consume excessive resources...
DEBIAN-CVE-2024-56374
An issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18. Lack of upper-bound limit enforcement in strings passed when performing IPv6 validation could lead to a potential denial-of-service attack. The undocumented and private functions cleanipv6address and...