REDHAT-BUG-2302433: Medium severity Django Django vulnerability
Description: If floatformat received a string representation of a number in scientific notation with a large exponent, it could lead to significant memory consumption.
To avoid this, decimals with more than 200 digits are now returned as is.
Affected versions =================
Django main development branch Django 5.1 (currently at release candidate status) Django 5.0 Django 4.2
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2302433?
The severity of REDHAT-BUG-2302433 is considered high due to the potential for significant memory consumption.
How do I fix REDHAT-BUG-2302433?
To fix REDHAT-BUG-2302433, upgrade to Django version 5.1 or later.
What versions of Django are affected by REDHAT-BUG-2302433?
REDHAT-BUG-2302433 affects Django versions between 4.2 and 5.0, and all versions prior to 5.1.
What issue does REDHAT-BUG-2302433 address?
REDHAT-BUG-2302433 addresses performance issues related to floatformat handling of numbers in scientific notation.
Is there a workaround for REDHAT-BUG-2302433?
Currently, the recommended approach is to upgrade to a fixed version, as there are no documented workarounds.