CVE-2024-53907

score

<0.1

cvss

7.5

epss

1.4%

published

2024-12-06

kev added

—

first seen

2026-10-21

Django 4.2 < 4.2.17, 5.0 < 5.0.10, and 5.1 < 5.1.4 contain a denial-of-service caused by strip_tags() method and striptags filter being vulnerable to nested incomplete HTML entities, letting attackers cause resource exhaustion, exploit requires crafted input with nested incomplete entities.