-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Django | pip | >= 5.1.0, < 5.1.4 | 5.1.4 |
| Django | pip | >= 4.2.0, < 4.2.17 | 4.2.17 |
| Django | pip | >= 5.0.0, < 5.0.10 | 5.0.10 |
| django | pip | >= 5.1, < 5.1.4 | 5.1.4 |
| django | pip | >= 5.0, < 5.0.10 | 5.0.10 |
| django | pip | >= 4.2, < 4.2.17 | 4.2.17 |
The vulnerability description explicitly names strip_tags() and striptags as the affected components. The CWE-770 (resource allocation without throttling) aligns with the DoS mechanism described. Django's security release notes and advisory links confirm these functions were patched in versions 4.2.17/5.0.10/5.1.4. The file paths are derived from Django's standard code structure, where HTML utilities reside in django/utils/html.py and template filters in django/template/defaultfilters.py.
KEV Misses 88% of Exploited CVEs- Get the report