CVE-2018-7537

score

<0.1

cvss

5.3

epss

4.4%

published

2018-03-09

kev added

—

first seen

2026-10-21

Django versions before 2.0.3, 1.11.11, and 1.8.19 contain a regular expression-based catastrophic backtracking vulnerability in django.utils.text.Truncator's chars() and words() methods when called with html=True, making them extremely slow for certain inputs, affecting truncatechars_html and truncatewords_html template filters.