[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2024-39614":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T02:55:30.529Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":23,"aliases":24,"duplicate_of":9,"upstream":28,"downstream":29,"duplicates":64,"related":65,"reserved_at":9,"published_at":77,"modified_at":78,"state":79,"summary":80,"references_raw":89,"kevs":146,"epss":147,"epss_history":150,"metrics":406,"affected":419},"CVE-2024-39614","An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. get_supported_language_variant() was subject to a potential denial-of-service attack when used with very long strings containing specific characters.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-130","Improper Handling of Length Parameter Inconsistency","The product parses a formatted message or structure, but it does not handle or incorrectly handles a length field that is inconsistent with the actual length of the associated data.","weakness","Incomplete","Base",[19],{"id":20,"name":21,"techniques":22},"CAPEC-47","Buffer Overflow via Parameter Expansion",[],[],[25,26,27],"GHSA-f6f8-9mx6-9mx2","BIT-django-2024-39614","PYSEC-2024-59",[],[30,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62],{"_key":31},"DLA-4458-1",{"_key":33},"SUSE-SU-2024:2545-1",{"_key":35},"SUSE-SU-2024:2577-1",{"_key":37},"OPENSUSE-SU-2024:0251-1",{"_key":39},"OPENSUSE-SU-2024:14203-1",{"_key":41},"OPENSUSE-SU-2024:14208-1",{"_key":43},"DSA-6136-1",{"_key":45},"OPENSUSE-SU-2026:10005-1",{"_key":47},"UBUNTU-CVE-2024-39614",{"_key":49},"MGASA-2025-0039",{"_key":51},"USN-6888-1",{"_key":53},"USN-6888-2",{"_key":55},"DEBIAN-CVE-2024-39614",{"_key":57},"RHSA-2024:6428",{"_key":59},"RHSA-2024:8906",{"_key":61},"RHSA-2024:9481",{"_key":63},"RHSA-2025:1335",[],[66,67,68,69,70,71,72,73,75],{"_key":33},{"_key":35},{"_key":37},{"_key":39},{"_key":41},{"_key":45},{"_key":49},{"_key":74},"CGA-P589-84HV-6JC4",{"_key":76},"CGA-MX83-5M72-GP28","2024-07-10T00:00:00.000Z","2025-11-04T16:12:29.895Z","Modified",{"cisa_kev":81,"cisa_ransomware":81,"cisa_vendor":9,"epss_severity":82,"epss_score":83,"severity":84,"severity_score":85,"severity_version":86,"severity_source":87,"severity_vector":88,"severity_status":79},false,"low",0.06838,"high",7.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",[90,98,103,108,112,117,121,125,129,134,138,142],{"url":91,"sources":92,"tags":95},"https://docs.djangoproject.com/en/dev/releases/security/",[87,93,94],"nvd","osv_pypi",[96,97],"Vendor Advisory","WEB",{"url":99,"sources":100,"tags":101},"https://groups.google.com/forum/#%21forum/django-announce",[87,93,94],[102,97],"Permissions Required",{"url":104,"sources":105,"tags":106},"https://www.djangoproject.com/weblog/2024/jul/09/security-releases/",[87,93,94],[96,107],"ARTICLE",{"url":109,"sources":110,"tags":111},"https://security.netapp.com/advisory/ntap-20240808-0005/",[87,93],[],{"url":113,"sources":114,"tags":115},"https://nvd.nist.gov/vuln/detail/CVE-2024-39614",[94],[116],"Advisory",{"url":118,"sources":119,"tags":120},"https://github.com/django/django/commit/17358fb35fb7217423d4c4877ccb6d1a3a40b1c3",[94],[97],{"url":122,"sources":123,"tags":124},"https://github.com/django/django/commit/8e7a44e4bec0f11474699c3111a5e0a45afe7f49",[94],[97],{"url":126,"sources":127,"tags":128},"https://docs.djangoproject.com/en/dev/releases/security",[94],[97],{"url":130,"sources":131,"tags":132},"https://github.com/django/django",[94],[133],"PACKAGE",{"url":135,"sources":136,"tags":137},"https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2024-59.yaml",[94],[97],{"url":139,"sources":140,"tags":141},"https://security.netapp.com/advisory/ntap-20240808-0005",[94],[97],{"url":143,"sources":144,"tags":145},"https://www.djangoproject.com/weblog/2024/jul/09/security-releases",[94],[97],[],{"date":148,"score":83,"percentile":149},"2026-06-04",0.91506,[151,154,156,159,162,164,167,170,172,175,178,181,183,186,189,193,196,199,202,205,208,211,214,216,218,221,224,226,230,233,236,239,242,244,246,249,251,254,257,260,262,265,267,269,272,275,278,281,284,287,290,293,296,299,302,305,307,309,312,315,318,321,324,327,330,333,336,339,342,345,348,351,354,357,359,362,366,369,371,374,377,380,383,386,389,392,395,398,400,403],{"date":152,"score":83,"percentile":153},"2025-11-04",0.90928,{"date":155,"score":83,"percentile":153},"2025-11-05",{"date":157,"score":83,"percentile":158},"2025-11-06",0.90929,{"date":160,"score":83,"percentile":161},"2025-11-07",0.90936,{"date":163,"score":83,"percentile":161},"2025-11-08",{"date":165,"score":83,"percentile":166},"2025-11-09",0.90934,{"date":168,"score":83,"percentile":169},"2025-11-10",0.90935,{"date":171,"score":83,"percentile":166},"2025-11-11",{"date":173,"score":83,"percentile":174},"2025-11-12",0.90938,{"date":176,"score":83,"percentile":177},"2025-11-13",0.9094,{"date":179,"score":83,"percentile":180},"2025-11-14",0.90943,{"date":182,"score":83,"percentile":177},"2025-11-15",{"date":184,"score":83,"percentile":185},"2025-11-16",0.90946,{"date":187,"score":83,"percentile":188},"2025-11-17",0.90944,{"date":190,"score":191,"percentile":192},"2025-11-18",0.21877,0.95375,{"date":194,"score":191,"percentile":195},"2025-11-19",0.95376,{"date":197,"score":191,"percentile":198},"2025-11-20",0.95379,{"date":200,"score":83,"percentile":201},"2025-11-21",0.9095,{"date":203,"score":83,"percentile":204},"2025-11-22",0.90951,{"date":206,"score":83,"percentile":207},"2025-11-23",0.90954,{"date":209,"score":83,"percentile":210},"2025-11-24",0.90955,{"date":212,"score":83,"percentile":213},"2025-11-25",0.90956,{"date":215,"score":83,"percentile":207},"2025-11-26",{"date":217,"score":83,"percentile":207},"2025-11-27",{"date":219,"score":83,"percentile":220},"2025-11-28",0.90945,{"date":222,"score":83,"percentile":223},"2025-11-29",0.90981,{"date":225,"score":83,"percentile":223},"2025-11-30",{"date":227,"score":228,"percentile":229},"2025-12-01",0.06151,0.90493,{"date":231,"score":228,"percentile":232},"2025-12-02",0.90494,{"date":234,"score":228,"percentile":235},"2025-12-03",0.90495,{"date":237,"score":83,"percentile":238},"2025-12-04",0.90978,{"date":240,"score":83,"percentile":241},"2025-12-05",0.90982,{"date":243,"score":83,"percentile":241},"2025-12-06",{"date":245,"score":83,"percentile":238},"2025-12-07",{"date":247,"score":83,"percentile":248},"2025-12-08",0.90979,{"date":250,"score":83,"percentile":241},"2025-12-09",{"date":252,"score":83,"percentile":253},"2025-12-10",0.90988,{"date":255,"score":83,"percentile":256},"2025-12-11",0.90995,{"date":258,"score":83,"percentile":259},"2025-12-12",0.90998,{"date":261,"score":83,"percentile":253},"2025-12-13",{"date":263,"score":83,"percentile":264},"2025-12-14",0.90987,{"date":266,"score":83,"percentile":253},"2025-12-15",{"date":268,"score":83,"percentile":259},"2025-12-16",{"date":270,"score":83,"percentile":271},"2025-12-17",0.91007,{"date":273,"score":83,"percentile":274},"2025-12-18",0.91011,{"date":276,"score":83,"percentile":277},"2025-12-19",0.91012,{"date":279,"score":83,"percentile":280},"2025-12-20",0.91013,{"date":282,"score":83,"percentile":283},"2025-12-21",0.91022,{"date":285,"score":83,"percentile":286},"2025-12-22",0.91016,{"date":288,"score":83,"percentile":289},"2025-12-23",0.91026,{"date":291,"score":83,"percentile":292},"2025-12-24",0.91034,{"date":294,"score":83,"percentile":295},"2025-12-25",0.91035,{"date":297,"score":83,"percentile":298},"2025-12-26",0.91032,{"date":300,"score":83,"percentile":301},"2025-12-27",0.9108,{"date":303,"score":83,"percentile":304},"2025-12-28",0.9103,{"date":306,"score":83,"percentile":289},"2025-12-29",{"date":308,"score":83,"percentile":304},"2025-12-30",{"date":310,"score":83,"percentile":311},"2025-12-31",0.91039,{"date":313,"score":228,"percentile":314},"2026-01-01",0.90577,{"date":316,"score":228,"percentile":317},"2026-01-02",0.9057,{"date":319,"score":228,"percentile":320},"2026-01-03",0.90569,{"date":322,"score":83,"percentile":323},"2026-01-04",0.91052,{"date":325,"score":83,"percentile":326},"2026-01-05",0.9105,{"date":328,"score":83,"percentile":329},"2026-01-06",0.91054,{"date":331,"score":83,"percentile":332},"2026-01-07",0.91057,{"date":334,"score":83,"percentile":335},"2026-01-08",0.9106,{"date":337,"score":83,"percentile":338},"2026-01-09",0.91065,{"date":340,"score":83,"percentile":341},"2026-01-10",0.91069,{"date":343,"score":83,"percentile":344},"2026-01-11",0.91062,{"date":346,"score":83,"percentile":347},"2026-01-12",0.91063,{"date":349,"score":83,"percentile":350},"2026-01-13",0.91061,{"date":352,"score":83,"percentile":353},"2026-01-14",0.91072,{"date":355,"score":83,"percentile":356},"2026-01-15",0.91076,{"date":358,"score":83,"percentile":301},"2026-01-16",{"date":360,"score":83,"percentile":361},"2026-01-17",0.91082,{"date":363,"score":364,"percentile":365},"2026-01-18",0.07012,0.91207,{"date":367,"score":364,"percentile":368},"2026-01-19",0.91208,{"date":370,"score":364,"percentile":368},"2026-01-20",{"date":372,"score":364,"percentile":373},"2026-01-21",0.91212,{"date":375,"score":364,"percentile":376},"2026-01-22",0.91214,{"date":378,"score":364,"percentile":379},"2026-01-23",0.91224,{"date":381,"score":364,"percentile":382},"2026-01-24",0.9123,{"date":384,"score":364,"percentile":385},"2026-01-25",0.91228,{"date":387,"score":83,"percentile":388},"2026-01-26",0.91109,{"date":390,"score":83,"percentile":391},"2026-01-27",0.91111,{"date":393,"score":83,"percentile":394},"2026-01-28",0.91115,{"date":396,"score":83,"percentile":397},"2026-01-29",0.91116,{"date":399,"score":83,"percentile":397},"2026-01-30",{"date":401,"score":83,"percentile":402},"2026-01-31",0.91117,{"date":404,"score":228,"percentile":405},"2026-02-01",0.90633,[407,412,414],{"source":87,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":408,"cvss_v4_0":9},{"baseScore":85,"baseSeverity":409,"vectorString":88,"impactScore":410,"exploitabilityScore":411},"HIGH",6,10,{"source":93,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":413,"cvss_v4_0":9},{"baseScore":85,"baseSeverity":409,"vectorString":88,"impactScore":410,"exploitabilityScore":411},{"source":94,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":415,"cvss_v4_0":416},{"baseScore":85,"baseSeverity":9,"vectorString":88,"impactScore":410,"exploitabilityScore":411},{"baseScore":417,"baseSeverity":9,"vectorString":418,"impactScore":9,"exploitabilityScore":9},8.7,"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",[420,438],{"ecosystem":9,"name":421,"vendor":422,"product":423,"cpe_part":424,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":425},"Django","djangoproject","django","a",[426,434],{"version":427,"is_range":428,"range_type":429,"version_start":430,"version_start_type":431,"version_end":432,"version_end_type":433,"fixed_in":9},"gte4.2_lt4.2.14",true,"cpe","4.2","including","4.2.14","excluding",{"version":435,"is_range":428,"range_type":429,"version_start":436,"version_start_type":431,"version_end":437,"version_end_type":433,"fixed_in":9},"gte5.0_lt5.0.7","5.0","5.0.7",{"ecosystem":439,"name":423,"vendor":439,"product":423,"cpe_part":9,"purl_type":440,"purl_namespace":9,"purl_name":423,"source":9,"versions":441},"PyPI","pypi",[442,445],{"version":443,"is_range":428,"range_type":444,"version_start":436,"version_start_type":431,"version_end":437,"version_end_type":433,"fixed_in":9},"gte5_0_lt5_0_7","ecosystem",{"version":446,"is_range":428,"range_type":444,"version_start":430,"version_start_type":431,"version_end":432,"version_end_type":433,"fixed_in":9},"gte4_2_lt4_2_14"]