aldryn-django (5.1.4.0), app-parcheggi-backup (>=1.0.0, <=1.0.1) +38 more potentially affected by CVE-2024-56374 via django (>=5.1.0, <=5.1.4)

django PYPI version =5.1.0, =1.0.0, =0.2.0a1, =0.1.6, =0.0.3, =0.0.15, =2.7.0, =0.92.0, =1.0.3, =0.6.2, =0.7.0 - django-pesapal 2.0.0 - django-qr-toolkit-core 4.2.3 and more Source cves: CVE-2024-56374 Source advisory: SNYK:PYTHON-DJANGO-8623541...

aldryn-django (5.1.4.0), app-parcheggi-backup (>=1.0.0, <=1.0.1) +38 more potentially affected by CVE-2024-56374 via django (>=5.1.0, <=5.1.4)

django PYPI version =5.1.0, =1.0.0, =0.2.0a1, =0.1.6, =0.0.3, =0.0.15, =2.7.0, =0.92.0, =1.0.3, =0.6.2, =0.7.0 - django-pesapal 2.0.0 - django-qr-toolkit-core 4.2.3 and more Source cves: CVE-2024-56374 Source advisory: SNYK:PYTHON-DJANGO-8623542...

CVE-2024-56374 vulnerabilities

Vulnerabilities for packages: awx, py3-django...

CVE-2024-56374

An issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18. Lack of upper-bound limit enforcement in strings passed when performing IPv6 validation could lead to a potential denial-of-service attack. The undocumented and private functions cleanipv6address and...

DEBIAN-CVE-2024-56374

An issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18. Lack of upper-bound limit enforcement in strings passed when performing IPv6 validation could lead to a potential denial-of-service attack. The undocumented and private functions cleanipv6address and...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS through the cleanipv6address and isvalidipv6address functions, as well as the GenericIPAddressField form field due to improper length validation. An attacker can cause the application to consume excessive resources...

Denial of Service (DoS)

Overview Django is a high-level Python Web framework that encourages rapid development and clean, pragmatic design. Affected versions of this package are vulnerable to Denial of Service DoS through the cleanipv6address and isvalidipv6address functions, as well as the GenericIPAddressField form...

PYSEC-2025-1

An issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18. Lack of upper-bound limit enforcement in strings passed when performing IPv6 validation could lead to a potential denial-of-service attack. The undocumented and private functions cleanipv6address and...

CVE-2024-56374 vulnerabilities

Vulnerabilities for packages: py3-django...

USN-7205-1 python-django vulnerability

It was discovered that Django incorrectly handled certain IPv6 strings. An attacker could possibly use this issue to cause a denial of service...

USN-7205-1: Django vulnerability

It was discovered that Django incorrectly handled certain IPv6 strings. An attacker could possibly use this issue to cause a denial of service...

UBUNTU-CVE-2024-56374

An issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18. Lack of upper-bound limit enforcement in strings passed when performing IPv6 validation could lead to a potential denial-of-service attack. The undocumented and private functions cleanipv6address and...

admin-auth0 (>=0.1.1, <=0.1.5), alcali (3006.3.0) +139 more potentially affected by CVE-2024-56374 via django (>=4.2.0, <=4.2.17)

django PYPI version =4.2.0, =0.1.1, =4.2.6.0, =65.10.0, =7.5.0a0, =1.1.0a0, =1.0.2, =0.0.1, =1.3.9, =0.4.0, =4.16.2, =4.8.0, =4.17.1 and more Source cves: CVE-2024-56374 Source advisory: MEND:CVE-2024-56374...

aldryn-django (>=5.0.2.0, <=5.0.10.0), artd-customer (>=0.0.20, <=0.0.23) +78 more potentially affected by CVE-2024-56374 via django (>=5.0.0, <=5.0.10)

django PYPI version =5.0.0, =5.0.2.0, =0.0.20, =0.0.13, =0.0.19, =0.0.34, =0.0.50, =0.0.5, =0.0.11, =1.0.3, =0.1.0, =0.1.0, =1.0.0, =6.0.0, =6.3.3 and more Source cves: CVE-2024-56374 Source advisory: MEND:CVE-2024-56374...

Django security vulnerabilities

Django is a set of open source web application frameworks based on the Python language from the Django Foundation. The framework includes an object-oriented mapper, view system, template system, and more. A security vulnerability in Django versions 5.1.5 prior to version 5.1, 5.0 prior to version...

aldryn-django (5.1.4.0), app-parcheggi-backup (>=1.0.0, <=1.0.1) +38 more potentially affected by CVE-2024-56374 via django (>=5.1.0, <=5.1.4)

django PYPI version =5.1.0, =1.0.0, =0.2.0a1, =0.1.6, =0.0.3, =0.0.15, =2.7.0, =0.92.0, =1.0.3, =0.6.2, =0.7.0 - django-pesapal 2.0.0 - django-qr-toolkit-core 4.2.3 and more Source cves: CVE-2024-56374 Source advisory: MEND:CVE-2024-56374...

CVE-2024-56374

An issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18. Lack of upper-bound limit enforcement in strings passed when performing IPv6 validation could lead to a potential denial-of-service attack. The undocumented and private functions cleanipv6address and...

CVE-2024-56374

CVE-2024-56374 affects Django versions 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18. The issue is a lack of upper-bound enforcement when validating IPv6 strings, making the undocumented private functions clean_ipv6_address and is_valid_ipv6_address and the django.forms.GenericIPAddr...

CVE-2024-56374

An issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18. Lack of upper-bound limit enforcement in strings passed when performing IPv6 validation could lead to a potential denial-of-service attack. The undocumented and private functions cleanipv6address and...

PT-2025-3272

Name of the Vulnerable Software and Affected Versions Django versions 4.2 through 4.2.17 Django versions 5.0 through 5.0.10 Django versions 5.1 through 5.1.4 Description A potential denial-of-service attack could occur due to the lack of upper-bound limit enforcement in strings passed when...