Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/python-django@4.2.9-1?arch=el8pc
purl pkg:rpm/redhat/python-django@4.2.9-1?arch=el8pc
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.0
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-4ztz-fq98-5fh1
Aliases:
BIT-django-2023-41164
CVE-2023-41164
GHSA-7h4p-27mh-hmrw
PYSEC-2023-225
In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uri_to_iri() is subject to a potential DoS (denial of service) attack via certain inputs with a very large number of Unicode characters. There are no reported fixed by versions.
VCID-8m4b-y4va-kqgm
Aliases:
BIT-django-2023-43665
CVE-2023-43665
GHSA-h8gc-pgj2-vjm3
PYSEC-2023-226
In Django 3.2 before 3.2.22, 4.1 before 4.1.12, and 4.2 before 4.2.6, the django.utils.text.Truncator chars() and words() methods (when used with html=True) are subject to a potential DoS (denial of service) attack via certain inputs with very long, potentially malformed HTML text. The chars() and words() methods are used to implement the truncatechars_html and truncatewords_html template filters, which are thus also vulnerable. NOTE: this issue exists because of an incomplete fix for CVE-2019-14232. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T13:52:49.803581+00:00 RedHat Importer Affected by VCID-4ztz-fq98-5fh1 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-41164.json 38.0.0
2026-04-01T13:52:28.637058+00:00 RedHat Importer Affected by VCID-8m4b-y4va-kqgm https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-43665.json 38.0.0