Wind River Support Network

HomeDefectsLIN1021-7704
Fixed

LIN1021-7704 : Security Advisory - python-django - CVE-2024-27351

Created: Mar 4, 2024    Updated: Jun 8, 2026
Resolved Date: Jun 8, 2026
Found In Version: 10.21.20.1
Fix Version: 10.21.20.27
Severity: Standard
Applicable for: Wind River Linux LTS 21
Component/s: Userspace

Description

In Django 3.2 before 3.2.25, 4.2 before 4.2.11, and 5.0 before 5.0.3, the django.utils.text.Truncator.words() method (with html=True) and the truncatewords_html template filter are subject to a potential regular expression denial-of-service attack via a crafted string. NOTE: this issue exists because of an incomplete fix for CVE-2019-14232 and CVE-2023-43665.

https://nvd.nist.gov/vuln/detail/CVE-2024-27351

CVEs

  • Linkedin
  • Facebook
  • Twitter
  • Youtube