CVE-2024-41991

score

<0.1

cvss

7.5

epss

1.0%

published

2024-08-07

kev added

—

first seen

2026-10-21

Django 5.0 < 5.0.8 and 4.2 < 4.2.15 contain a denial-of-service caused by handling inputs with a very large number of Unicode characters in urlize, urlizetrunc template filters, and AdminURLFieldWidget, letting attackers cause service disruption, exploit requires specific crafted inputs.