DemoBook a demo

Vulnerability advisory

CVE-2024-41989

Published Updated OSV record ↗

Also known as BIT-django-2024-41989GHSA-jh75-99hh-qvx9PYSEC-2024-67

Severity
  • CVSS 3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected versions

Repository

Affected commitsFixed by commit
GIT github.com/django/django ↗
97aa3b7f08f51669e118f3af5ca91026e39664c3 to before 4d32ebcd57340aa8de2d6d31613f1646dc6391f64d32ebcd57340aa8de2d6d31613f1646dc6391f6
52821001bb62b764d73e63812133f199b8fef9eb to before 84d1102a8a3bba64bcc1b14a7117c26a83fb7fe584d1102a8a3bba64bcc1b14a7117c26a83fb7fe5

Description

An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The floatformat template filter is subject to significant memory consumption when given a string representation of a number in scientific notation with a large exponent.

References

  • Codex
  • Claude Code
  • VS Code
  • GitHub Copilot
  • Cursor
  • Cline
  • Windsurf
  • Google Anti-gravity
  • OpenCode
  • Pi
  • Gemini CLI
  • Hermes Agent
  • Zed
  • Junie
  • Qwen Code
  • Kiro
  • Kilo Code
  • Factory Droid

Set up GitHits for your agents

Run this command:

<> bash
npx githits@latest init

What happens next:

  1. Opens your browser to authorize GitHits
  2. Asks whether to set up GitHits at the user or project level
  3. Detects your supported AI coding tools
  4. Lets you choose which tools to configure
  5. Configures the selected tools

Having trouble? Check our documentation.