Django CVE-2024-41989/41990/41991 Memory Exhaustion and DoS Vulnerability Advisory

From this webpage screenshot, the following key information about the vulnerabilities can be obtained: 1. Vulnerability IDs and Descriptions: - CVE-2024-41989: Memory exhaustion in . This vulnerability occurs because the template filter consumes excessive memory when processing numbers in scientific notation. - CVE-2024-41990: Potential denial-of-service in . This vulnerability arises when the and template filters process specific character sequences, potentially leading to a denial-of-service attack. - CVE-2024-41991: Potential denial-of-service vulnerability in and . This vulnerability occurs when , , and process specific inputs, potentially resulting in a denial-of-service attack. 2. Affected Versions: - Django 5.0.8 - Django 4.2.15 - Django 5.1 (candidate release status) - Django 5.0 - Django 4.2 3. Severity of Vulnerabilities: - CVE-2024-41989: "moderate" - CVE-2024-41990: "moderate" - CVE-2024-41991: "moderate" 4. Remediation Solutions: - For each vulnerability, fix patches are provided for different branches, including the main branch, 5.1 branch, 5.0 branch, and 4.2 branch. 5. Release Information: - Release details for Django 5.0.8 and Django 4.2.15, including download links and checksums. 6. Security Reporting Guidelines: - Security issues should be reported via private email, not through the Django Trac instance, Django forums, or the django-developers mailing list. This information helps users understand the nature of the vulnerabilities, their impact scope, and how to remediate them.

Goal Reached Thanks to every supporter — we hit 100%!

Django CVE-2024-41989/41990/41991 Memory Exhaustion and DoS Vulnerability Advisory