-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability documentation explicitly names both django.utils.text.wrap() and the wordwrap template filter as attack vectors. The CWE-770 classification indicates a lack of resource throttling, which aligns with the described DoS scenario involving long string processing. Multiple sources (security advisories, release notes, CVE details) consistently reference these two functions as the vulnerable components. The functions' roles in text wrapping and template filtering make them logical points for uncontrolled resource allocation when handling untrusted input.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Django | pip | >= 4.2, < 4.2.20 | 4.2.20 |
| Django | pip | >= 5.0, < 5.0.13 | 5.0.13 |
| Django | pip | >= 5.1, < 5.1.7 | 5.1.7 |