CVE-2025-26699: Debian Linux

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap() method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings.

Affected products

• Debian Debian Linux: version 11.0 only
• Djangoproject Django: from 4.2, before 4.2.20 (fixed in 4.2.20); from 5.0, before 5.0.13 (fixed in 5.0.13); from 5.1, before 5.1.7 (fixed in 5.1.7)

Published 2025-03-06. Last modified 2026-06-17.