USN-3591-1: Django vulnerabilities
Published Mar 6, 2018
·Updated
James Davis discovered that Django incorrectly handled certain template filters. A remote attacker could possibly use this issue to cause Django to consume resources, resulting in a denial of service.
Affected Software
1 affected component
pypi/django
Event History
Feb 20, 2026
Advisory Published
via Ubuntu·08:54 PM
Data Sourced
via Ubuntu·08:54 PM
DescriptionAffected Software
Frequently Asked Questions
1
What is the vulnerability ID of this Django vulnerability?
The vulnerability ID of this Django vulnerability is CVE-2018-7536.
2
How does the vulnerability in Django impact the system?
The vulnerability in Django can cause a denial of service by consuming excessive resources.
3
Which versions of Django are affected by this vulnerability?
Versions 1.11.4 and earlier of python-django and python3-django are affected.
4
What is the recommended remedy for this Django vulnerability?
Update python-django and python3-django to version 1.11.4-1ubuntu1.2 or later.
5
Where can I find more information about this Django vulnerability?
You can find more information about this Django vulnerability at the following links: [CVE-2018-7536](https://ubuntu.com/security/CVE-2018-7536) and [CVE-2018-7537](https://ubuntu.com/security/CVE-2018-7537).