Lucene search
K

8 matches found

RedHat Linux
RedHat Linux
added 2025/03/25 12:26 p.m.2 views

django: Potential denial-of-service vulnerability in django.utils.text.wrap()

A potential denial of service vulnerability exists in django.utils.text.wrap and the wordwrap template filter. When processing extremely long strings, these functions may cause excessive resource consumption, potentially leading to service disruption...

7.5CVSS7.2AI score0.00287EPSS
Exploits0References6
SUSE Linux
SUSE Linux
added 2025/03/19 4:56 p.m.0 views

Security update for python-Django

This update for python-Django fixes the following issues: CVE-2025-26699: Fixed potential denial-of-service in django.utils.text.wrap bsc1239052. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively y...

6.9CVSS6.6AI score0.00287EPSS
Exploits0References4
NVD
NVD
added 2025/03/06 7:15 p.m.8 views

CVE-2025-26699

An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings...

7.5CVSS0.00287EPSS
Exploits0References5
Snyk
Snyk
added 2025/03/06 3:41 p.m.1 views

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the django.utils.text.wrap function and wordwrap template filter. When either is supplied an excessively long string it may render the application unresponsive. Remediation Upgrade...

8.7CVSS6.9AI score0.00287EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2015/03/30 12:0 a.m.39 views

Mandriva Linux Security Advisory : perl (MDVSA-2015:136)

Updated perl package fixes security vulnerability : The Dumper method in Data::Dumper before 2.154, as used in Perl 5.20.1 and earlier, allows context-dependent attackers to cause a denial of service stack consumption and crash via an Array-Reference with many nested Array-References, which...

2.1CVSS7.3AI score0.00117EPSS
Exploits3References2
OSV
OSV
added 2014/10/09 2:6 p.m.6 views

MGASA-2014-0406 Updated perl packages fix CVE-2014-4330

Updated perl package fixes security vulnerability: The Dumper method in Data::Dumper before 2.154, as used in Perl 5.20.1 and earlier, allows context-dependent attackers to cause a denial of service stack consumption and crash via an Array-Reference with many nested Array-References, which trigge...

2.1CVSS6.4AI score0.00117EPSS
Exploits3References5
Mageia
Mageia
added 2014/10/09 2:6 p.m.46 views

Updated perl packages fix CVE-2014-4330

Updated perl package fixes security vulnerability: The Dumper method in Data::Dumper before 2.154, as used in Perl 5.20.1 and earlier, allows context-dependent attackers to cause a denial of service stack consumption and crash via an Array-Reference with many nested Array-References, which trigge...

2.1CVSS7.4AI score0.00117EPSS
Exploits3References4
Tenable Nessus
Tenable Nessus
added 2007/10/17 12:0 a.m.21 views

openSUSE 10 Security Update : spamassassin (spamassassin-3077)

This upgrade brings spamassassin to version 3.1.8 with following changes : - fix for CVE-2007-0451: possible DoS due to incredibly long URIs found in the message content. - disable perl module usage in update channels unless --allowplugins is specified - files with names starting/ending in...

4.3CVSS8.2AI score0.33365EPSS
Exploits0References1
Rows per page
Query Builder