Threats tagged 'ghsa-vm8q-m57g-pff3'

A regular expression denial-of-service (ReDoS) vulnerability exists in Django versions 3.2 before 3.2.25, 4.2 before 4.2.11, and 5.0 before 5.0.3. The issue affects the django.utils.text.Truncator.words() method when used with html=True and the truncatewords_html template filter. This vulnerability arises from an incomplete fix of previous related CVEs and can be triggered by crafted input strings causing excessive processing time.