summaryrefslogtreecommitdiff
path: root/docs/releases/4.2.20.txt
blob: 5849fe2a42ededcd87053567ccfce6d1d69f9a79 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
===========================
Django 4.2.20 release notes
===========================

*March 6, 2025*

Django 4.2.20 fixes a security issue with severity "moderate" in 4.2.19.

CVE-2025-26699: Potential denial-of-service vulnerability in ``django.utils.text.wrap()``
=========================================================================================

The ``wrap()`` and :tfilter:`wordwrap` template filter were subject to a
potential denial-of-service attack when used with very long strings.