DemoBook a demo

Vulnerability advisory

CVE-2024-24680

Published Updated OSV record ↗

Also known as BIT-django-2024-24680GHSA-xxj9-f6rv-m3x4PYSEC-2024-28

Severity
  • CVSS 3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected versions

Repository

Affected commitsFixed by commit
GIT github.com/django/django ↗
3591e1c1acbd7c13174275367c3fdf012cb0413b to before f5c880857e8e01b006c75b9e79a9088cc2c6228ff5c880857e8e01b006c75b9e79a9088cc2c6228f
97aa3b7f08f51669e118f3af5ca91026e39664c3 to before a684d73fc9ad94bbc535385d8b1d7c05ea06702fa684d73fc9ad94bbc535385d8b1d7c05ea06702f
52821001bb62b764d73e63812133f199b8fef9eb to before 428d06ccef09e70bcef9869c5a9404863b2fc7d8428d06ccef09e70bcef9869c5a9404863b2fc7d8

Description

An issue was discovered in Django 3.2 before 3.2.24, 4.2 before 4.2.10, and Django 5.0 before 5.0.2. The intcomma template filter was subject to a potential denial-of-service attack when used with very long strings.

References

  • Codex
  • Claude Code
  • VS Code
  • GitHub Copilot
  • Cursor
  • Cline
  • Windsurf
  • Google Anti-gravity
  • OpenCode
  • Pi
  • Gemini CLI
  • Hermes Agent
  • Zed
  • Junie
  • Qwen Code
  • Kiro
  • Kilo Code
  • Factory Droid

Set up GitHits for your agents

Run this command:

<> bash
npx githits@latest init

What happens next:

  1. Opens your browser to authorize GitHits
  2. Asks whether to set up GitHits at the user or project level
  3. Detects your supported AI coding tools
  4. Lets you choose which tools to configure
  5. Configures the selected tools

Having trouble? Check our documentation.