DemoBook a demo

Vulnerability advisory

CVE-2019-14233

Published Updated OSV record ↗

Also known as GHSA-h5jv-4p7w-64jgPYSEC-2019-12

Severity
  • CVSS 3.xCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected versions

Repository

Affected commitsFixed by commit
GIT github.com/django/django ↗
c669cf279ae7b3e02a61db4fb077030a4db80e4f to before 974897759e9afc4cc56fb87e12319fa9697e93c9974897759e9afc4cc56fb87e12319fa9697e93c9
df591468251ed489a3e147d7c359f387f4effe66 to before ff9dcc0867eba90e9ab1b07a4b3eb79928717918ff9dcc0867eba90e9ab1b07a4b3eb79928717918
2a62cdcfec85938f40abb2e9e6a9ff497e02afe8 to before 8687fbe034ac5eec20e0948b98eb8a2f0b1431a18687fbe034ac5eec20e0948b98eb8a2f0b1431a1

Description

An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. Due to the behaviour of the underlying HTMLParser, django.utils.html.strip_tags would be extremely slow to evaluate certain inputs containing large sequences of nested incomplete HTML entities.

References

  • Codex
  • Claude Code
  • VS Code
  • GitHub Copilot
  • Cursor
  • Cline
  • Windsurf
  • Google Anti-gravity
  • OpenCode
  • Pi
  • Gemini CLI
  • Hermes Agent
  • Zed
  • Junie
  • Qwen Code
  • Kiro
  • Kilo Code
  • Factory Droid

Set up GitHits for your agents

Run this command:

<> bash
npx githits@latest init

What happens next:

  1. Opens your browser to authorize GitHits
  2. Asks whether to set up GitHits at the user or project level
  3. Detects your supported AI coding tools
  4. Lets you choose which tools to configure
  5. Configures the selected tools

Having trouble? Check our documentation.