CVE-2024-28865: Denial of service via regular expression

March 18, 2024

All historical installations of django-wiki are vulnerable to maliciously crafted article content, that can cause severe use of server CPU through a regular expression loop.

References

github.com/advisories/GHSA-wj85-w4f4-xh8h
github.com/django-wiki/django-wiki
github.com/django-wiki/django-wiki/commit/8e280fd6c0bd27ce847c67b2d216c6cbf920f88c
github.com/django-wiki/django-wiki/security/advisories/GHSA-wj85-w4f4-xh8h
nvd.nist.gov/vuln/detail/CVE-2024-28865

Code Behaviors & Features

Detect and mitigate CVE-2024-28865 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →