Denial-of-Service Vulnerability in Django Products by Django Software Foundation
CVE-2025-26699

5MEDIUM

Key Information:

Vendor

Djangoproject

Status
Django
Vendor
CVE Published:
6 March 2025

What is CVE-2025-26699?

A potential denial-of-service vulnerability has been identified in the Django framework affecting various versions prior to specified updates. This issue arises from the django.utils.text.wrap() method and wordwrap template filter, which can be compromised when processing excessively long strings, leading to service disruption. Users are urged to upgrade to the latest versions to mitigate risks.

Affected Version(s)

Django 4.2 < 4.2.20

Django 5.0 < 5.0.13

Django 5.1 < 5.1.7

References

https://docs.djangoproject.com/en/dev/releases/security/
https://groups.google.com/g/django-announce
https://www.djangoproject.com/weblog/2025/mar/06/security...

CVSS V3.1

Score:
5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.