[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-1285":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T17:35:29.592Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":21,"duplicate_of":9,"upstream":34,"downstream":35,"duplicates":69,"related":70,"reserved_at":9,"published_at":80,"modified_at":81,"state":82,"summary":83,"references_raw":92,"kevs":162,"epss":163,"epss_history":166,"metrics":446,"affected":462},"CVE-2026-1285","An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.\n`django.utils.text.Truncator.chars()` and `Truncator.words()` methods (with `html=True`) and the `truncatechars_html` and `truncatewords_html` template filters allow a remote attacker to cause a potential denial-of-service via crafted inputs containing a large number of unmatched HTML end tags.\nEarlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected.\nDjango would like to thank Seokchan Yoon for reporting this issue.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-407","Inefficient Algorithmic Complexity","An algorithm in a product has an inefficient worst-case computational complexity that may be detrimental to system performance and can be triggered by an attacker, typically using crafted manipulations that ensure that the worst case is being reached.","weakness","Incomplete","Class","Low",[],[],[22,23,24,25,26,27,28,29,30,31,32,33],"GHSA-4rrr-2h4v-f3j9","BIT-django-2026-1285","PYSEC-2026-45","DEBIAN-CVE-2026-1285","CGA-2q9x-6fm8-j4r9","CGA-4j4f-x2qq-g53f","CGA-7859-pjpx-4p4v","CGA-9jvm-9jm3-c6wp","CGA-fc3j-v5gm-26g8","CGA-h82q-m5xf-v88q","CGA-rfjq-fmqf-xxg6","CGA-vw99-qjfc-mm56",[],[36,38,40,42,44,46,48,50,52,54,56,57,59,61,63,65,67],{"_key":37},"OPENSUSE-SU-2026:10160-1",{"_key":39},"DLA-4484-1",{"_key":41},"DSA-6150-1",{"_key":43},"SUSE-SU-2026:0440-1",{"_key":45},"OPENSUSE-SU-2026:10145-1",{"_key":47},"OPENSUSE-SU-2026:10247-1",{"_key":49},"OPENSUSE-SU-2026:20184-1",{"_key":51},"MGASA-2026-0032",{"_key":53},"USN-8009-1",{"_key":55},"UBUNTU-CVE-2026-1285",{"_key":25},{"_key":58},"OPENSUSE-SU-2026:11270-1",{"_key":60},"RHSA-2026:14835",{"_key":62},"RHSA-2026:5970",{"_key":64},"RHSA-2026:5971",{"_key":66},"RHSA-2026:3958",{"_key":68},"RHSA-2026:3959",[],[71,72,73,74,75,76,77,78],{"_key":37},{"_key":43},{"_key":45},{"_key":47},{"_key":49},{"_key":51},{"_key":58},{"_key":79},"CGA-2WXM-M3Q3-V24C","2026-02-03T14:35:50.254Z","2026-02-03T16:22:33.352Z","Analyzed",{"cisa_kev":84,"cisa_ransomware":84,"cisa_vendor":9,"epss_severity":85,"epss_score":86,"severity":87,"severity_score":88,"severity_version":89,"severity_source":90,"severity_vector":91,"severity_status":82},false,"low",0.01032,"high",7.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",[93,104,112,116,120,124,128,133,137,141,145,150,154,158],{"url":94,"sources":95,"tags":99},"https://docs.djangoproject.com/en/dev/releases/security/",[90,96,97,98],"nvd","osv_pypi","osv_chainguard",[100,101,102,103],"Vendor Advisory","Patch","FIX","Advisory",{"url":105,"sources":106,"tags":107},"https://groups.google.com/g/django-announce",[90,96,97,98],[108,109,110,103,111],"Mailing List","Release Notes","WEB","ARTICLE",{"url":113,"sources":114,"tags":115},"https://www.djangoproject.com/weblog/2026/feb/03/security-releases/",[90,96,97,98],[100,101,102,103],{"url":117,"sources":118,"tags":119},"https://nvd.nist.gov/vuln/detail/CVE-2026-1285",[97,98],[103],{"url":121,"sources":122,"tags":123},"https://github.com/django/django/commit/a33540b3e20b5d759aa8b2e4b9ca0e8edd285344",[97],[110],{"url":125,"sources":126,"tags":127},"https://docs.djangoproject.com/en/dev/releases/security",[97],[110],{"url":129,"sources":130,"tags":131},"https://github.com/django/django",[97],[132],"PACKAGE",{"url":134,"sources":135,"tags":136},"https://www.djangoproject.com/weblog/2026/feb/03/security-releases",[97],[110],{"url":138,"sources":139,"tags":140},"https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2026-45.yaml",[97],[110],{"url":142,"sources":143,"tags":144},"https://github.com/advisories/GHSA-4rrr-2h4v-f3j9",[97],[103],{"url":146,"sources":147,"tags":149},"https://security-tracker.debian.org/tracker/CVE-2026-1285",[148],"osv_debian",[103],{"url":151,"sources":152,"tags":153},"https://github.com/django/django/",[98],[110],{"url":155,"sources":156,"tags":157},"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/1xxx/CVE-2026-1285.json",[98],[103],{"url":159,"sources":160,"tags":161},"https://pypi.org/project/Django/",[98],[132],[],{"date":164,"score":86,"percentile":165},"2026-09-19",0.62245,[167,171,175,179,182,185,189,192,195,198,202,205,208,211,214,217,220,223,227,230,233,236,239,242,245,248,252,255,258,261,264,267,271,274,277,280,283,286,289,292,295,298,301,304,307,309,312,315,318,321,324,327,330,333,336,340,343,346,349,352,355,358,361,364,367,370,373,376,380,383,386,389,392,395,398,401,404,407,410,413,416,419,422,425,428,431,434,437,440,443],{"date":168,"score":169,"percentile":170},"2026-02-04",0.00042,0.12512,{"date":172,"score":173,"percentile":174},"2026-02-05",0.0005,0.15659,{"date":176,"score":177,"percentile":178},"2026-02-06",0.00037,0.1084,{"date":180,"score":177,"percentile":181},"2026-02-07",0.10869,{"date":183,"score":177,"percentile":184},"2026-02-08",0.10858,{"date":186,"score":187,"percentile":188},"2026-02-09",0.00049,0.15076,{"date":190,"score":187,"percentile":191},"2026-02-10",0.15005,{"date":193,"score":187,"percentile":194},"2026-02-11",0.15048,{"date":196,"score":187,"percentile":197},"2026-02-12",0.1508,{"date":199,"score":200,"percentile":201},"2026-02-13",0.00055,0.17241,{"date":203,"score":200,"percentile":204},"2026-02-14",0.1722,{"date":206,"score":200,"percentile":207},"2026-02-15",0.17204,{"date":209,"score":200,"percentile":210},"2026-02-16",0.17161,{"date":212,"score":200,"percentile":213},"2026-02-17",0.17143,{"date":215,"score":200,"percentile":216},"2026-02-18",0.17314,{"date":218,"score":200,"percentile":219},"2026-02-19",0.17374,{"date":221,"score":200,"percentile":222},"2026-02-20",0.17376,{"date":224,"score":225,"percentile":226},"2026-02-21",0.00071,0.21707,{"date":228,"score":225,"percentile":229},"2026-02-22",0.21692,{"date":231,"score":225,"percentile":232},"2026-02-23",0.21658,{"date":234,"score":225,"percentile":235},"2026-02-24",0.21615,{"date":237,"score":225,"percentile":238},"2026-02-25",0.21602,{"date":240,"score":225,"percentile":241},"2026-02-26",0.21611,{"date":243,"score":225,"percentile":244},"2026-02-27",0.21631,{"date":246,"score":225,"percentile":247},"2026-02-28",0.21622,{"date":249,"score":250,"percentile":251},"2026-03-01",0.00063,0.19431,{"date":253,"score":250,"percentile":254},"2026-03-02",0.19374,{"date":256,"score":250,"percentile":257},"2026-03-03",0.19344,{"date":259,"score":225,"percentile":260},"2026-03-04",0.21479,{"date":262,"score":225,"percentile":263},"2026-03-05",0.21554,{"date":265,"score":225,"percentile":266},"2026-03-06",0.2155,{"date":268,"score":269,"percentile":270},"2026-03-07",0.00077,0.22961,{"date":272,"score":269,"percentile":273},"2026-03-08",0.22934,{"date":275,"score":269,"percentile":276},"2026-03-09",0.22899,{"date":278,"score":269,"percentile":279},"2026-03-10",0.22875,{"date":281,"score":269,"percentile":282},"2026-03-11",0.22847,{"date":284,"score":269,"percentile":285},"2026-03-12",0.22884,{"date":287,"score":269,"percentile":288},"2026-03-13",0.22929,{"date":290,"score":269,"percentile":291},"2026-03-14",0.22931,{"date":293,"score":269,"percentile":294},"2026-03-15",0.22856,{"date":296,"score":269,"percentile":297},"2026-03-16",0.22865,{"date":299,"score":269,"percentile":300},"2026-03-17",0.22823,{"date":302,"score":269,"percentile":303},"2026-03-18",0.22814,{"date":305,"score":269,"percentile":306},"2026-03-19",0.22813,{"date":308,"score":269,"percentile":297},"2026-03-20",{"date":310,"score":269,"percentile":311},"2026-03-21",0.22957,{"date":313,"score":269,"percentile":314},"2026-03-22",0.22946,{"date":316,"score":269,"percentile":317},"2026-03-23",0.2291,{"date":319,"score":269,"percentile":320},"2026-03-24",0.22898,{"date":322,"score":269,"percentile":323},"2026-03-25",0.22951,{"date":325,"score":269,"percentile":326},"2026-03-26",0.2302,{"date":328,"score":269,"percentile":329},"2026-03-27",0.2304,{"date":331,"score":269,"percentile":332},"2026-03-28",0.23061,{"date":334,"score":269,"percentile":335},"2026-03-29",0.23017,{"date":337,"score":338,"percentile":339},"2026-03-30",0.00064,0.20012,{"date":341,"score":338,"percentile":342},"2026-03-31",0.20017,{"date":344,"score":338,"percentile":345},"2026-04-01",0.20041,{"date":347,"score":338,"percentile":348},"2026-04-02",0.20187,{"date":350,"score":338,"percentile":351},"2026-04-03",0.20216,{"date":353,"score":338,"percentile":354},"2026-04-04",0.20242,{"date":356,"score":338,"percentile":357},"2026-04-05",0.20213,{"date":359,"score":338,"percentile":360},"2026-04-06",0.19979,{"date":362,"score":338,"percentile":363},"2026-04-07",0.19968,{"date":365,"score":338,"percentile":366},"2026-04-08",0.20047,{"date":368,"score":338,"percentile":369},"2026-04-09",0.20106,{"date":371,"score":338,"percentile":372},"2026-04-10",0.20136,{"date":374,"score":338,"percentile":375},"2026-04-11",0.20125,{"date":377,"score":378,"percentile":379},"2026-04-12",0.00067,0.20824,{"date":381,"score":378,"percentile":382},"2026-04-13",0.20771,{"date":384,"score":378,"percentile":385},"2026-04-14",0.20731,{"date":387,"score":378,"percentile":388},"2026-04-15",0.20777,{"date":390,"score":378,"percentile":391},"2026-04-16",0.20761,{"date":393,"score":378,"percentile":394},"2026-04-17",0.20762,{"date":396,"score":378,"percentile":397},"2026-04-18",0.20754,{"date":399,"score":378,"percentile":400},"2026-04-19",0.20693,{"date":402,"score":378,"percentile":403},"2026-04-20",0.20665,{"date":405,"score":378,"percentile":406},"2026-04-21",0.20742,{"date":408,"score":378,"percentile":409},"2026-04-22",0.20797,{"date":411,"score":378,"percentile":412},"2026-04-23",0.2081,{"date":414,"score":378,"percentile":415},"2026-04-24",0.20626,{"date":417,"score":378,"percentile":418},"2026-04-25",0.20639,{"date":420,"score":378,"percentile":421},"2026-04-26",0.20622,{"date":423,"score":378,"percentile":424},"2026-04-27",0.20614,{"date":426,"score":378,"percentile":427},"2026-04-28",0.20575,{"date":429,"score":378,"percentile":430},"2026-04-29",0.20587,{"date":432,"score":378,"percentile":433},"2026-04-30",0.20552,{"date":435,"score":378,"percentile":436},"2026-05-01",0.2055,{"date":438,"score":378,"percentile":439},"2026-05-02",0.20589,{"date":441,"score":378,"percentile":442},"2026-05-03",0.20553,{"date":444,"score":378,"percentile":445},"2026-05-04",0.20492,[447,452,454,458,460],{"source":90,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":448,"cvss_v4_0":9},{"baseScore":88,"baseSeverity":449,"vectorString":91,"impactScore":450,"exploitabilityScore":451},"HIGH",6,10,{"source":96,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":453,"cvss_v4_0":9},{"baseScore":88,"baseSeverity":449,"vectorString":91,"impactScore":450,"exploitabilityScore":451},{"source":97,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":455},{"baseScore":456,"baseSeverity":9,"vectorString":457,"impactScore":9,"exploitabilityScore":9},6.9,"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U",{"source":148,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":459,"cvss_v4_0":9},{"baseScore":88,"baseSeverity":9,"vectorString":91,"impactScore":450,"exploitabilityScore":451},{"source":98,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":461,"cvss_v4_0":9},{"baseScore":88,"baseSeverity":9,"vectorString":91,"impactScore":450,"exploitabilityScore":451},[463,475,479,485,491,509,528],{"ecosystem":464,"name":465,"vendor":466,"product":465,"cpe_part":9,"purl_type":467,"purl_namespace":466,"purl_name":465,"source":9,"versions":468},"Chainguard","authentik","chainguard","apk",[469],{"version":470,"is_range":471,"range_type":472,"version_start":9,"version_start_type":9,"version_end":473,"version_end_type":474,"fixed_in":9},"lt2025_12_1_r2",true,"ecosystem","2025.12.1-r2","excluding",{"ecosystem":464,"name":476,"vendor":466,"product":476,"cpe_part":9,"purl_type":467,"purl_namespace":466,"purl_name":476,"source":9,"versions":477},"authentik-fips",[478],{"version":470,"is_range":471,"range_type":472,"version_start":9,"version_start_type":9,"version_end":473,"version_end_type":474,"fixed_in":9},{"ecosystem":464,"name":480,"vendor":466,"product":480,"cpe_part":9,"purl_type":467,"purl_namespace":466,"purl_name":480,"source":9,"versions":481},"awx",[482],{"version":483,"is_range":471,"range_type":472,"version_start":9,"version_start_type":9,"version_end":484,"version_end_type":474,"fixed_in":9},"lt24_6_1_r27","24.6.1-r27",{"ecosystem":464,"name":486,"vendor":466,"product":486,"cpe_part":9,"purl_type":467,"purl_namespace":466,"purl_name":486,"source":9,"versions":487},"label-studio",[488],{"version":489,"is_range":471,"range_type":472,"version_start":9,"version_start_type":9,"version_end":490,"version_end_type":474,"fixed_in":9},"lt1_22_0_r3","1.22.0-r3",{"ecosystem":492,"name":493,"vendor":494,"product":493,"cpe_part":9,"purl_type":495,"purl_namespace":494,"purl_name":493,"source":9,"versions":496},"Debian","python-django","debian","deb",[497,500,503,506],{"version":498,"is_range":471,"range_type":472,"version_start":9,"version_start_type":9,"version_end":499,"version_end_type":474,"fixed_in":9},"lt2:2_2_28_1~deb11u12","2:2.2.28-1~deb11u12",{"version":501,"is_range":471,"range_type":472,"version_start":9,"version_start_type":9,"version_end":502,"version_end_type":474,"fixed_in":9},"lt3:3_2_25_0+deb12u2","3:3.2.25-0+deb12u2",{"version":504,"is_range":471,"range_type":472,"version_start":9,"version_start_type":9,"version_end":505,"version_end_type":474,"fixed_in":9},"lt3:4_2_28_0+deb13u1","3:4.2.28-0+deb13u1",{"version":507,"is_range":471,"range_type":472,"version_start":9,"version_start_type":9,"version_end":508,"version_end_type":474,"fixed_in":9},"lt3:4_2_28_1","3:4.2.28-1",{"ecosystem":9,"name":510,"vendor":511,"product":510,"cpe_part":512,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":513},"django","djangoproject","a",[514,520,524],{"version":515,"is_range":471,"range_type":516,"version_start":517,"version_start_type":518,"version_end":519,"version_end_type":474,"fixed_in":9},"gte4.2_lt4.2.28","cpe","4.2","including","4.2.28",{"version":521,"is_range":471,"range_type":516,"version_start":522,"version_start_type":518,"version_end":523,"version_end_type":474,"fixed_in":9},"gte5.2_lt5.2.11","5.2","5.2.11",{"version":525,"is_range":471,"range_type":516,"version_start":526,"version_start_type":518,"version_end":527,"version_end_type":474,"fixed_in":9},"gte6.0_lt6.0.2","6.0","6.0.2",{"ecosystem":529,"name":510,"vendor":529,"product":510,"cpe_part":9,"purl_type":530,"purl_namespace":9,"purl_name":510,"source":9,"versions":531},"PyPI","pypi",[532,534,537,540],{"version":533,"is_range":471,"range_type":472,"version_start":526,"version_start_type":518,"version_end":527,"version_end_type":474,"fixed_in":9},"gte6_0_lt6_0_2",{"version":535,"is_range":471,"range_type":472,"version_start":536,"version_start_type":518,"version_end":527,"version_end_type":474,"fixed_in":9},"gte6_0a1_lt6_0_2","6.0a1",{"version":538,"is_range":471,"range_type":472,"version_start":539,"version_start_type":518,"version_end":523,"version_end_type":474,"fixed_in":9},"gte5_2a1_lt5_2_11","5.2a1",{"version":541,"is_range":471,"range_type":472,"version_start":542,"version_start_type":518,"version_end":519,"version_end_type":474,"fixed_in":9},"gte4_2a1_lt4_2_28","4.2a1"]