Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2018-7536
5
MEDIUMCVSS v2
Published
March 9, 2018
Affected
4 projects
Assigned by
MITRE
Severity scale
010
Description
An issue was discovered in Django 2.0 before 2.0.3, 1.11 before 1.11.11, and 1.8 before 1.8.19. The django.utils.html.urlize() function was extremely slow to evaluate certain inputs due to catastrophic backtracking vulnerabilities in two regular expressions (only one regular expression for Django 1.8.x). The urlize() function is used to implement the urlize and urlizetrunc template filters, which were thus vulnerable.
django/django
GitHubThe Web framework for perfectionists with deadlines.
GitHubThe Web framework for perfectionists with deadlines.>= 1.8, < 1.8.19, >= 1.11, < 1.11.11, >= 2.0, < 2.0.3NVD
DjangoPython Package IndexA high-level Python web framework that encourages rapid development and clean, pragmatic design.
Python Package IndexA high-level Python web framework that encourages rapid development and clean, pragmatic design.>= 1.8, < 1.8.19, >= 1.11, < 1.11.11, >= 2.0, < 2.0.3NVD
django
Docker Hub
NPM