1
0
mirror of https://github.com/django/django.git synced 2025-03-12 10:22:37 +00:00
django/docs/releases/5.0.13.txt
Sarah Boyce 3cfa472644 [5.2.x] Fixed CVE-2025-26699 -- Mitigated potential DoS in wordwrap template filter.
Thanks sw0rd1ight for the report.

Backport of 55d89e25f4115c5674cdd9b9bcba2bb2bb6d820b from main.
2025-03-06 09:42:27 +01:00

14 lines
499 B
Plaintext

===========================
Django 5.0.13 release notes
===========================
*March 6, 2025*
Django 5.0.13 fixes a security issue with severity "moderate" in 5.0.12.
CVE-2025-26699: Potential denial-of-service vulnerability in ``django.utils.text.wrap()``
=========================================================================================
The ``wrap()`` and :tfilter:`wordwrap` template filter were subject to a
potential denial-of-service attack when used with very long strings.