PT-2025-9994

CVE-2025-26699

·

Published

2025-03-06

·

Updated

2026-07-14

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Django versions 4.2 through 4.2.19 Django versions 5.0 through 5.0.12 Django versions 5.1 through 5.1.6
Description A potential denial-of-service attack can occur when the django.utils.text.wrap() method and wordwrap template filter are used with very long strings.
Recommendations For Django versions 4.2 through 4.2.19, update to version 4.2.20 or later. For Django versions 5.0 through 5.0.12, update to version 5.0.13 or later. For Django versions 5.1 through 5.1.6, update to version 5.1.7 or later.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
GHSA-P3FP-8748-VQFQ
ALT-PU-2025-10176
ALT-PU-2025-4236
BIT-DJANGO-2025-26699
DLA-4086-1
MGASA-2025-0095
OESA-2025-1260
OPENSUSE-SU-2025_0959-1
OPENSUSE-SU-2025:14908-1
OPENSUSE-SU-2025:14913-1
OPENSUSE-SU-2026:10005-1
OPENSUSE-SU-2026:11270-1
PYSEC-2025-13
RHSA-2025:3160
RHSA-2025:4553
RHSA-2025:8609
SUSE-SU-2025:0959-1
USN-7335-1
Found an issue in the description? Have something to add? Feel free to write us 👾