CVE-2024-38875

An issue was discovered in Django 4.2 before 4.2.14 and 5.0 before 5.0.7. urlize and urlizetrunc were subject to a potential denial of service attack via certain inputs with a very large number of brackets.

Affected products

Alt Linux, Astra Linux, Debian, Django, Linuxmint, Suse, Ubuntu

Djangoproject Django

< 4.2.14, 5.0.7

Fix

Available

CVSS 3.1

7.5 HIGH

EPSS

1.2% (65th percentile)

Weakness

CWE-130

NVD status

Modified

Published

2024-07-10

No exploit for CVE-2024-38875 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.