REDHAT-BUG-2295938: Medium severity Django Software Foundation Django vulnerability

Published Jul 5, 2024

Updated

getsupportedlanguagevariant() was subject to a potential denial-of-service attack when used with very long strings including a specific set of characters.

Affected versions =================

Django main development branch Django 5.1 Django 5.0 Django 4.2

Affected Software

1 affected component

Django Software Foundation Django>main development branch

Event History

Jul 5, 2024

Data Sourced

via Red Hat·09:58 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2295938?

REDHAT-BUG-2295938 is categorized as a potential denial-of-service vulnerability affecting certain versions of Django.

How do I fix REDHAT-BUG-2295938?

To fix REDHAT-BUG-2295938, you should update to a patched version of Django that addresses this vulnerability.

What versions of Django are affected by REDHAT-BUG-2295938?

Affected versions include Django 5.1, Django 5.0, Django 4.2, and the main development branch.

What is the main risk associated with REDHAT-BUG-2295938?

The main risk is a possible denial-of-service attack resulting from the handling of very long strings in a specific format.

Can REDHAT-BUG-2295938 affect my application?

Yes, if your application uses an affected version of Django, it may be vulnerable to the issues described in REDHAT-BUG-2295938.