Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/python-django@3:4.2.11-1?distro=trixie
purl pkg:deb/debian/python-django@3:4.2.11-1?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-jh1e-72hp-fuf4 In Django 3.2 before 3.2.25, 4.2 before 4.2.11, and 5.0 before 5.0.3, the django.utils.text.Truncator.words() method (with html=True) and the truncatewords_html template filter are subject to a potential regular expression denial-of-service attack via a crafted string. NOTE: this issue exists because of an incomplete fix for CVE-2019-14232 and CVE-2023-43665. BIT-django-2024-27351
CVE-2024-27351
GHSA-vm8q-m57g-pff3
PYSEC-2024-47

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T08:54:54.599404+00:00 Debian Importer Fixing VCID-jh1e-72hp-fuf4 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-11T17:58:56.827805+00:00 Debian Importer Fixing VCID-jh1e-72hp-fuf4 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:50:44.468608+00:00 Debian Importer Fixing VCID-jh1e-72hp-fuf4 https://security-tracker.debian.org/tracker/data/json 38.1.0