HTTP: Django wordwrap Filter Denial of Service

This signature detects attempts to exploit a known vulnerability against Django. A successful attack can result in a denial-of-service condition.

Extended Description

An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap() method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings.

References

CVE: CVE-2025-26699

URL: https://www.djangoproject.com/weblog/2025/mar/06/security-releases/

Short Name

HTTP:DOS:DJANGO-FILTER-DOS

Severity

Major

Recommended

False

Recommended Action

None

HTTP: Django wordwrap Filter Denial of Service

Extended Description

References

Found a potential security threat?