Django Project Django 4.2

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:djangoproject:django:4.2:-:*:*:*:*:*:*

part: a version: 4.2 update: -

VendorDjangoproject (070db687-4713-5da4-80b0-4a67baf0d0d4)
ProductDjango (b34a5fd0-fae8-5096-941f-bded7e4dd228)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/django/django purl2cpe 2026-06-01 10:17:26.828780
pkg:github/django/django purl2cpe 2026-06-01 10:17:26.828781
pkg:pypi/django purl2cpe 2026-06-01 10:17:26.828783

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-38875 vulnerable 2026-06-08 06:41:48.560436 Details available
An issue was discovered in Django 4.2 before 4.2.14 and 5.0 before 5.0.7. urlize and urlizetrunc were subject to a potential denial of service attack via certain inputs with a very large number of brackets.
Published: 2024-07-10T00:00:00.000Z
Updated: 2025-11-04T16:12:24.941Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31047 vulnerable 2026-06-08 06:04:41.727850 Details available
In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField (only the last uploaded file was validated). However, Django's "Uploading multiple files" documentation suggested otherwise.
Published: 2023-05-07T00:00:00.000Z
Updated: 2025-01-29T15:51:24.644Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.