CVE-2025-32873

score

<0.1

cvss

5.3

epss

14.3%

published

2025-05-08

kev added

—

first seen

2026-10-21

Django 4.2 < 4.2.21, 5.1 < 5.1.9, and 5.2 < 5.2.1 contain a denial-of-service caused by slow processing in django.utils.html.strip_tags() when handling inputs with large sequences of incomplete HTML tags, letting attackers cause slow performance, exploit requires processing maliciously crafted input.