DemoBook a demo

Vulnerability advisory

CVE-2019-6975

Published Updated OSV record ↗

Also known as GHSA-wh4h-v3f2-r2ppPYSEC-2019-18

Severity
  • CVSS 3.xCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected versions

Repository

Affected commitsFixed by commit
GIT github.com/django/django ↗
All commits before 1cdba624d55d5c2fe3c74fff1fb5fb17b126821d1cdba624d55d5c2fe3c74fff1fb5fb17b126821d
Not specifiedbe439e58768cd827ca8ac8ff9263c4aae0f75907
Not specified79a6e7798fec3de342c687b4a6d512c499c1f972
Also listed as affected (52)
  • 1.11.18
  • 2.0.10
  • 2.1.5
  • 1.11.17
  • 2.1.4
  • 2.1.3
  • 2.1.2
  • 2.0.9
  • 1.11.16
  • 2.1.1
  • 2.1
  • 2.0.8
  • 1.11.15
  • 2.1rc1
  • 2.0.7
  • 1.11.14
  • 2.1b1
  • 2.0.6
  • 2.1a1
  • 1.11.13
  • 2.0.5
  • 1.11.12
  • 2.0.4
  • 2.0.3
  • 1.11.11
  • 2.0.2
  • 1.11.10
  • 1.11.9
  • 2.0.1
  • 2.0
  • 1.11.8
  • 2.0rc1
  • 1.11.7
  • 2.0b1
  • 1.11.6
  • 2.0a1
  • 1.11.5
  • 1.11.4
  • 1.11.3
  • 1.11.2
  • 1.11.1
  • 1.11
  • 1.11rc1
  • 1.11b1
  • 1.11a1
  • 1.7a2
  • 1.4
  • 1.3
  • 1.2.1
  • 1.2
  • 1.1
  • 1.0

Description

Django 1.11.x before 1.11.19, 2.0.x before 2.0.11, and 2.1.x before 2.1.6 allows Uncontrolled Memory Consumption via a malicious attacker-supplied value to the django.utils.numberformat.format() function.

References

  • Codex
  • Claude Code
  • VS Code
  • GitHub Copilot
  • Cursor
  • Cline
  • Windsurf
  • Google Anti-gravity
  • OpenCode
  • Pi
  • Gemini CLI
  • Hermes Agent
  • Zed
  • Junie
  • Qwen Code
  • Kiro
  • Kilo Code
  • Factory Droid

Set up GitHits for your agents

Run this command:

<> bash
npx githits@latest init

What happens next:

  1. Opens your browser to authorize GitHits
  2. Asks whether to set up GitHits at the user or project level
  3. Detects your supported AI coding tools
  4. Lets you choose which tools to configure
  5. Configures the selected tools

Having trouble? Check our documentation.