CVE-2026-1285

score

<0.1

cvss

7.5

epss

1.1%

published

2026-02-03

kev added

—

first seen

2026-10-21

Django < 6.0.2, < 5.2.11, and < 4.2.28 contain a denial-of-service caused by crafted inputs with many unmatched HTML end tags in Truncator methods and template filters, letting remote attackers cause DoS, exploit requires crafted input.