Django Software Foundation · Django · CVE-2015-2316
**Name of the Vulnerable Software and Affected Versions**
Django versions 1.6.x through 1.6.10
Django versions 1.7.x through 1.7.6
Django versions 1.8.x through 1.8c1 (exclusive of 1.8c1)
**Description**
The issue allows remote attackers to cause a denial of service (infinite loop) by increasing the length of the input string, specifically when using certain versions of Python. This is related to the `utils.html.strip tags` function.
**Recommendations**
For Django versions 1.6.x through 1.6.10, update to version 1.6.11 or later.
For Django versions 1.7.x through 1.7.6, update to version 1.7.7 or later.
For Django versions 1.8.x through 1.8c1 (exclusive of 1.8c1), update to version 1.8c1 or later.
As a temporary workaround, consider restricting the input length to prevent infinite loops in the `utils.html.strip tags` function.