CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!
CVE-2025-26699: An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap() method and wordwrap...
5.0
CVSS
Description
An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap() method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings.
Classification
CVE ID: CVE-2025-26699
CVSS Base Severity: MEDIUM
CVSS Base Score: 5.0
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L
Affected Products
Vendor: djangoproject
Product: Django
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.06% (probability of being exploited)
EPSS Percentile: 15.75% (scored less or equal to compared to others)
EPSS Date: 2025-04-04 (when was this score calculated)
References
https://nvd.nist.gov/vuln/detail/CVE-2025-26699https://docs.djangoproject.com/en/dev/releases/security/
https://groups.google.com/g/django-announce
https://www.djangoproject.com/weblog/2025/mar/06/security-releases/