Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2015-2316
5
MEDIUMCVSS v2
Published
March 25, 2015
Affected
5 projects
Assigned by
MITRE
Severity scale
010
Description
The utils.html.strip_tags function in Django 1.6.x before 1.6.11, 1.7.x before 1.7.7, and 1.8.x before 1.8c1, when using certain versions of Python, allows remote attackers to cause a denial of service (infinite loop) by increasing the length of the input string.
django/django
GitHubThe Web framework for perfectionists with deadlines.
GitHubThe Web framework for perfectionists with deadlines.= 1.7.5, = 1.7.3, = 1.6, = 1.6.7, = 1.7, = 1.6.5, = 1.6.10, = 1.6.2, = 1.6.1, = 1.7.4, = 1.6.4, = 1.6.3, = 1.7.1, = 1.7.2, = 1.6.6, = 1.6.9, = 1.6.8, = 1.7.6, = 1.8.0NVD
DjangoPython Package IndexA high-level Python web framework that encourages rapid development and clean, pragmatic design.
Python Package IndexA high-level Python web framework that encourages rapid development and clean, pragmatic design.= 1.7.5, = 1.7.3, = 1.6, = 1.6.7, = 1.7, = 1.6.5, = 1.6.10, = 1.6.2, = 1.6.1, = 1.7.4, = 1.6.4, = 1.6.3, = 1.7.1, = 1.7.2, = 1.6.6, = 1.6.9, = 1.6.8, = 1.7.6, = 1.8.0NVD
NPM
RubyGems