Lucene search
K

12 matches found

OSV
OSV
added 2025/03/06 9:31 p.m.0 views

GHSA-P3FP-8748-VQFQ Django vulnerable to Allocation of Resources Without Limits or Throttling

An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings...

5CVSS7.1AI score0.00748EPSS
Exploits0References8
OSV
OSV
added 2025/03/06 1:0 p.m.4 views

UBUNTU-CVE-2025-26699

An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings...

7.5CVSS7.1AI score0.00748EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2024/08/20 8:33 p.m.4 views

Django: denial-of-service in ``intcomma`` template filter

A vulnerability was found in Django. When used with very long strings, the intcomma template filter was subject to a potential denial of service attack...

7.5CVSS7.1AI score0.01606EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2024/05/22 8:35 p.m.2 views

Django: denial-of-service in ``intcomma`` template filter

A vulnerability was found in Django. When used with very long strings, the intcomma template filter was subject to a potential denial of service attack...

7.5CVSS7.1AI score0.01606EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2024/02/29 7:47 p.m.1 views

Django: denial-of-service in ``intcomma`` template filter

A vulnerability was found in Django. When used with very long strings, the intcomma template filter was subject to a potential denial of service attack...

7.5CVSS7.1AI score0.01606EPSS
Exploits0References6
OSV
OSV
added 2024/02/06 3:0 p.m.1 views

UBUNTU-CVE-2024-24680

An issue was discovered in Django 3.2 before 3.2.24, 4.2 before 4.2.10, and Django 5.0 before 5.0.2. The intcomma template filter was subject to a potential denial-of-service attack when used with very long strings...

7.5CVSS6.8AI score0.01606EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2023/06/05 12:30 p.m.3 views

apr-util: out-of-bounds writes in the apr_base64

A flaw was found in the Apache Portable Runtime Utility APR-util library. This issue may allow a malicious attacker to cause an out-of-bounds write due to an integer overflow when encoding/decoding a very long string using the base64 family of functions...

6.5CVSS6.8AI score0.01417EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2023/05/31 1:10 p.m.5 views

apr-util: out-of-bounds writes in the apr_base64

A flaw was found in the Apache Portable Runtime Utility APR-util library. This issue may allow a malicious attacker to cause an out-of-bounds write due to an integer overflow when encoding/decoding a very long string using the base64 family of functions...

6.5CVSS6.8AI score0.01417EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2023/05/31 8:46 a.m.4 views

apr-util: out-of-bounds writes in the apr_base64

A flaw was found in the Apache Portable Runtime Utility APR-util library. This issue may allow a malicious attacker to cause an out-of-bounds write due to an integer overflow when encoding/decoding a very long string using the base64 family of functions...

6.5CVSS6.8AI score0.01417EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2023/05/16 7:39 p.m.6 views

apr-util: out-of-bounds writes in the apr_base64

A flaw was found in the Apache Portable Runtime Utility APR-util library. This issue may allow a malicious attacker to cause an out-of-bounds write due to an integer overflow when encoding/decoding a very long string using the base64 family of functions...

6.5CVSS6.8AI score0.01417EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2023/05/16 7:32 p.m.1 views

apr-util: out-of-bounds writes in the apr_base64

A flaw was found in the Apache Portable Runtime Utility APR-util library. This issue may allow a malicious attacker to cause an out-of-bounds write due to an integer overflow when encoding/decoding a very long string using the base64 family of functions...

6.5CVSS6.8AI score0.01417EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2019/07/19 4:13 p.m.83 views

Regular Expression Denial of Service (ReDoS) in lodash

lodash prior to 4.7.11 is affected by: CWE-400: Uncontrolled Resource Consumption. The impact is: Denial of service. The component is: Date handler. The attack vector is: Attacker provides very long strings, which the library attempts to match using a regular expression. The fixed version is:...

6.5CVSS5.3AI score0.03076EPSS
Exploits1References9Affected Software4
Rows per page
Query Builder