angler-fishThe Vulnerability History Project

[1.11.x] Fixed CVE-2018-7536 -- Fixed catastrophic backtracking in urlize and urlizetrunc template filters.

      Thanks Florian Apolloner for assisting with the patch.
by Lindsey the Elephant Seal 2018-02-24 16:30:11 UTC
commit abf89d729f210c692a50e0ad3f75fb6bec6fae16
Django Fix Irregular Expression CVE-2018-7536
django/utils/html.py
+12 -21
docs/releases/1.11.11.txt
-11
docs/releases/1.8.19.txt
-11
tests/utils_tests/test_html.py
-8
expand_less