CVE-2019-14232

score

<0.1

cvss

7.5

epss

3.5%

published

2019-08-02

kev added

—

first seen

2026-10-21

Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4 contain a catastrophic backtracking vulnerability in django.utils.text.Truncator's chars() and words() methods when passed html=True, letting attackers cause denial of service by slow evaluation, exploit requires passing html=True with crafted input.