-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
PythonPython| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Django | pip | >= 5.0, < 5.0.8 | 5.0.8 |
| Django | pip | >= 4.2, < 4.2.15 | 4.2.15 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from the unpatched floatformat template filter in Django's defaultfilters.py. The GitHub commit 27900fe explicitly modifies this function to add a guard clause checking if 'number_of_digits_and_exponent_sum > 200', indicating this was the vulnerable code path. The CVE description directly references the floatformat filter's handling of scientific notation inputs, and the patch adds logic to mitigate memory consumption by rejecting overly large values. The file path and function name match across all provided sources (advisory, commit diff, release notes).
Ongoing coverage of React2Shell