Improper Validation of Specified Quantity in Input Affecting py3-django package, versions <4.2.16-r0
Threat Intelligence
EPSS
0.05% (23rd
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-ALPINE320-PY3DJANGO-8163647
- published 8 Oct 2024
- disclosed 7 Aug 2024
Introduced: 7 Aug 2024
CVE-2024-41991 Open this link in a new tabHow to fix?
Upgrade Alpine:3.20 py3-django to version 4.2.16-r0 or higher.
NVD Description
Note: Versions mentioned in the description apply only to the upstream py3-django package and not the py3-django package as distributed by Alpine.
See How to fix? for Alpine:3.20 relevant fixed versions and status.
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize and urlizetrunc template filters, and the AdminURLFieldWidget widget, are subject to a potential denial-of-service attack via certain inputs with a very large number of Unicode characters.
CVSS Scores
version 3.1