Uncontrolled Memory Consumption in Django
High severity
GitHub Reviewed
Published
Feb 12, 2019
to the GitHub Advisory Database
•
Updated Sep 5, 2023
Package
Affected versions
< 1.11.19
>= 2.0.0, < 2.0.11
>= 2.1.0, < 2.1.6
Patched versions
1.11.19
2.0.11
2.1.6
Description
Published to the GitHub Advisory Database
Feb 12, 2019
Reviewed
Jun 16, 2020
Last updated
Sep 5, 2023
Credits
-
tdunlap607 Analyst
Django 1.11.x before 1.11.19, 2.0.x before 2.0.11, and 2.1.x before 2.1.6 allows Uncontrolled Memory Consumption via a malicious attacker-supplied value to the
django.utils.numberformat.format()function.References