CVE-2025-26699

score

<0.1

cvss

5.0

epss

0.8%

published

2025-03-06

kev added

—

first seen

2026-10-21

Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20 contain a denial-of-service caused by inefficient handling of very long strings in django.utils.text.wrap() method and wordwrap template filter, letting attackers cause service disruption, exploit requires use of these functions with very long strings.