angler-fishThe Vulnerability History Project

[2.1.X] Fixed CVE-2019-14233 -- Prevented excessive HTMLParser recursion in strip_tags() when handling incomplete HTML entities.

      Thanks to Guido Vranken for initial report.
by Leland the Mouse 2019-07-15 10:00:06 UTC
commit 5ff8e791148bd451180124d76a55cb2b2b9556eb
Django Fix Super Slow Tag Stripping CVE-2019-14233
django/utils/html.py
+2 -2
docs/releases/1.11.23.txt
-17
docs/releases/2.1.11.txt
-17
tests/utils_tests/test_html.py
-2
expand_less