CVE-2024-41989

Publication date

2024-08-07 00:00:00

Family

mitre

State

PUBLISHED

Description

An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The floatformat template filter is subject to significant memory consumption when given a string representation of a number in scientific notation with a large exponent.