Resource exhaustion in Django - CVE-2026-1285

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU122259

Resource exhaustion in Django - CVE-2026-1285

Published: February 3, 2026


Vulnerability identifier: #VU122259
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-1285
CWE-ID: CWE-400
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to application does not properly control consumption of internal resources within the django.utils.text.Truncator.chars() and Truncator.words() methods (with html=True) and truncatechars_html and truncatewords_html template filters. A remote attacker can trigger resource exhaustion and perform a denial of service (DoS) attack.


Affected software

Django
Debian Linux
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
Fedora
Ubuntu
SUSE Package Hub 15
openSUSE Leap
openEuler
Anolis OS
Maximo Application Suite - Edge Data Collector
ansible-sign (Red Hat package)
python3.12-rfc3339-validator (Red Hat package)
python3.12-ruamel-yaml-clib (Red Hat package)
python3.12-nh3 (Red Hat package)
python3.12-pyasn1-modules (Red Hat package)
python3.12-insights-analytics-collector (Red Hat package)
python3.12-jsonschema-path (Red Hat package)
python3.12-drools-jpy (Red Hat package)
python3.12-distlib (Red Hat package)
python3.12-propcache (Red Hat package)
python3.12-subprocess-tee (Red Hat package)
python3.12-pathable (Red Hat package)
python3.12-colorama (Red Hat package)
python3.12-json-stream-rs-tokenizer (Red Hat package)
python3.12-galaxy-importer (Red Hat package)
python3.12-pyasn1 (Red Hat package)
python3.12-inflection (Red Hat package)
python3.12-gnupg (Red Hat package)
python3.12-sqlparse (Red Hat package)
aap-metrics-utility (Red Hat package)
python3.12-isodate (Red Hat package)
python3.12-openapi-schema-validator (Red Hat package)
python3.12-ptyprocess (Red Hat package)
python3.12-mccabe (Red Hat package)
python3.12-openapi-spec-validator (Red Hat package)
python3.12-defusedxml (Red Hat package)
python3.12-django-crum (Red Hat package)
python3.12-pytest-plus (Red Hat package)
python3.12-tabulate (Red Hat package)
python3.12-commonmark (Red Hat package)
python3.12-click-help-colors (Red Hat package)
python3.12-s3transfer (Red Hat package)
python3.12-pathspec (Red Hat package)
python3.12-lockfile (Red Hat package)
python3.12-rq-scheduler (Red Hat package)
python3.12-jpy (Red Hat package)
python3.12-ecdsa (Red Hat package)
python3.12-rpds-py (Red Hat package)
python3.12-ruamel-yaml (Red Hat package)
python3.12-prometheus-client (Red Hat package)
python3.12-openapi-core (Red Hat package)
python3.12-pulp-glue (Red Hat package)
python3.12-pulp-ansible (Red Hat package)
python3.12-drf-spectacular (Red Hat package)
python3.12-validators (Red Hat package)
python3.12-referencing (Red Hat package)
python3.12-wheel (Red Hat package)
python3.12-drf-nested-routers (Red Hat package)
python3.12-mypy-extensions (Red Hat package)
python3.12-ansible-sdk (Red Hat package)
python3.12-janus (Red Hat package)
python3.12-ldap-filter (Red Hat package)
python3.12-resolvelib (Red Hat package)
python3.12-jmespath (Red Hat package)
python3.12-asyncio-throttle (Red Hat package)
python3.12-persisting-theory (Red Hat package)
python3.12-crontab (Red Hat package)
automation-controller-fapolicyd (Red Hat package)
python3.12-djangorestframework-queryfields (Red Hat package)
python3.12-et-xmlfile (Red Hat package)
python3.12-pytest-sugar (Red Hat package)
python3.12-django-lifecycle (Red Hat package)
ansible-rulebook (Red Hat package)
automation-eda-controller (Red Hat package)
python3.12-brotli (Red Hat package)
python3.12-django-split-settings (Red Hat package)
python3.12-netaddr (Red Hat package)
python3.12-ansible-pylibssh (Red Hat package)
python3.12-enrich (Red Hat package)
python3.12-deprecated (Red Hat package)
python3.12-onigurumacffi (Red Hat package)
python3.12-xlwt (Red Hat package)
python3.12-requests-oauthlib (Red Hat package)
python3.12-parsley (Red Hat package)
python3.12-xmlsec (Red Hat package)
python3.12-aiosignal (Red Hat package)
python3.12-frozenlist (Red Hat package)
python3.12-odfpy (Red Hat package)
python3.12-url-normalize (Red Hat package)
python3.12-drf-access-policy (Red Hat package)
python3.12-freezegun (Red Hat package)
python3.12-jwcrypto (Red Hat package)
python3.12-jq (Red Hat package)
python3.12-pluggy (Red Hat package)
python3.12-pyproject-api (Red Hat package)
receptor (Red Hat package)
python3.12-uamqp (Red Hat package)
python-django (Ubuntu package)
python3.12-websocket-client (Red Hat package)
python3.12-distro (Red Hat package)
python3.12-lazy-object-proxy (Red Hat package)
python3.12-pydantic (Red Hat package)
python3.12-django-storages (Red Hat package)
python3.12-markuppy (Red Hat package)
python3.12-django-dynamic-preferences (Red Hat package)
python3.12-wrapt (Red Hat package)
python3.12-python3-saml (Red Hat package)
python3.12-six (Red Hat package)
python3.12-yarl (Red Hat package)
python3.12-parse (Red Hat package)
python3.12-opentelemetry (Red Hat package)
python3.12-opentelemetry-contrib (Red Hat package)
python3.12-azure-core (Red Hat package)
python3.12-boto3 (Red Hat package)
python3.12-botocore (Red Hat package)
yamllint (Red Hat package)
python3.12-xds-protos (Red Hat package)
python3.12-grpcio (Red Hat package)
python3.12-googleapis-common-protos (Red Hat package)
python3.12-iniconfig (Red Hat package)
pulpcore-selinux (Red Hat package)
python3.12-croniter (Red Hat package)
python3.12-xlrd (Red Hat package)
python3.12-async-lru (Red Hat package)
uwsgi (Red Hat package)
python3.12-execnet (Red Hat package)
python3.12-markupsafe (Red Hat package)
python3.12-dpath (Red Hat package)
python3.12-backoff (Red Hat package)
python3-Django
python-django
python-django-help
python3.12-django-oauth-toolkit (Red Hat package)
python3.12-django-prometheus (Red Hat package)
python3.12-json-stream (Red Hat package)
python3.12-bracex (Red Hat package)
ansible-runner (Red Hat package)
python3.12-pyrad (Red Hat package)
python3.12-pygtrie (Red Hat package)
ansible-automation-platform-installer (Red Hat package)
python3.12-django-ansible-base (Red Hat package)
automation-gateway (Red Hat package)
python3.12-aiohappyeyeballs (Red Hat package)
python3.12-rq (Red Hat package)
python3.12-tacacs-plus (Red Hat package)
python3.12-urllib3 (Red Hat package)
python3.12-pyjwt (Red Hat package)
python3.12-dateutil (Red Hat package)
python3.12-semantic-version (Red Hat package)
python3.12-pycodestyle (Red Hat package)
bindep (Red Hat package)
ansible-core (Red Hat package)
python3.12-pygments (Red Hat package)
python3.12-pulp-container (Red Hat package)
python3.12-google-auth (Red Hat package)
python3.12-requests (Red Hat package)
python3.12-werkzeug (Red Hat package)
python3.12-django-ipware (Red Hat package)
python3.12-pyflakes (Red Hat package)
python3.12-termcolor (Red Hat package)
ansible-builder (Red Hat package)
python3.12-pyparsing (Red Hat package)
python3.12-django-picklefield (Red Hat package)
python3.12-openpyxl (Red Hat package)
python3.12-daemon (Red Hat package)
python3.12-jinja2 (Red Hat package)
python3.12-gitpython (Red Hat package)
python3.12-aiodns (Red Hat package)
python3.12-python3-openid (Red Hat package)
python3.12-django-rq (Red Hat package)
python3.12-oauthlib (Red Hat package)
python3.12-psycopg (Red Hat package)
python3.12-dynaconf (Red Hat package)
python-django (Debian package)
python3.12-django-import-export (Red Hat package)
python3.12-django-guid (Red Hat package)
python3.12-xxhash (Red Hat package)
python3.12-ldap (Red Hat package)
python3.12-tablib (Red Hat package)
python3.12-markdown (Red Hat package)
python3.12-asgiref (Red Hat package)
python3.12-pytest-xdist (Red Hat package)
python3.12-filelock (Red Hat package)
python3.12-aiohttp (Red Hat package)
python3.12-djangorestframework (Red Hat package)
python3.12-zipp (Red Hat package)
python3.12-marshmallow (Red Hat package)
python3.12-pulpcore (Red Hat package)
python3.12-django-auth-ldap (Red Hat package)
python3.12-daphne (Red Hat package)
python3.12-channels (Red Hat package)
python3.12-gitdb (Red Hat package)
python3.12-uritemplate (Red Hat package)
python3.12-django-extensions (Red Hat package)
python3.12-platformdirs (Red Hat package)
supervisor (Red Hat package)
python311-Django
python3-django-bash-completion
python3-django-doc
python3-django
python3.12-django (Red Hat package)
python-django4.2
python3.12-pycares (Red Hat package)
python3.12-social-auth-core (Red Hat package)
python3.12-redis (Red Hat package)
automation-controller (Red Hat package)
python3.12-pexpect (Red Hat package)
python3.12-rsa (Red Hat package)
python3.12-galaxy-ng (Red Hat package)
automation-hub (Red Hat package)
python3.12-typing-extensions (Red Hat package)
python3.12-tox (Red Hat package)
python3.12-jsonschema (Red Hat package)
python3.12-smmap (Red Hat package)
python3.12-watchdog (Red Hat package)
python3.12-django-flags (Red Hat package)
python3.12-chardet (Red Hat package)
python-django5
python3.12-lxml (Red Hat package)
python3.12-cachetools (Red Hat package)
python3.12-podman (Red Hat package)
python3.12-django-redis (Red Hat package)
python3.12-social-auth-app-django (Red Hat package)
python3.12-protobuf (Red Hat package)
python3.12-pbr (Red Hat package)
python3.12-importlib-metadata (Red Hat package)
python3.12-multidict (Red Hat package)
python3.12-flake8 (Red Hat package)
python3.12-zope-interface (Red Hat package)
python3.12-whitenoise (Red Hat package)
python3.12-click (Red Hat package)
python3.12-wcmatch (Red Hat package)
python3.12-pytest (Red Hat package)
python3.12-more-itertools (Red Hat package)
python3.12-pillow (Red Hat package)
python3.12-pillow-debugsource (Red Hat package)
python3.12-azure-storage-blob (Red Hat package)
python3.12-rich (Red Hat package)
python3.12-websockets (Red Hat package)
python3.12-virtualenv (Red Hat package)
python3.12-hyperlink (Red Hat package)
python3.12-service-identity (Red Hat package)
python3.12-argon2-cffi-bindings (Red Hat package)
python3.12-attrs (Red Hat package)
python3.12-Automat (Red Hat package)
python3.12-gunicorn (Red Hat package)
python3.12-argon2-cffi (Red Hat package)
python3.12-txaio (Red Hat package)
python3.12-aiofiles (Red Hat package)
python3.12-packaging (Red Hat package)
python3.12-django-filter (Red Hat package)
python3.12-constantly (Red Hat package)
python3.12-pyOpenSSL (Red Hat package)
python3.12-autobahn (Red Hat package)
python3.12-black (Red Hat package)
python3.12-twisted (Red Hat package)
python3.12-incremental (Red Hat package)
ansible-creator (Red Hat package)
molecule (Red Hat package)
python3.12-pytest-ansible (Red Hat package)
python3.12-tox-ansible (Red Hat package)
python3.12-ansible-compat (Red Hat package)
ansible-dev-environment (Red Hat package)
python3.12-kubernetes (Red Hat package)
ansible-dev-tools (Red Hat package)
ansible-lint (Red Hat package)
ansible-navigator (Red Hat package)
python3.12-cryptography (Red Hat package)
python3.12-setuptools (Red Hat package)
python3.12-certifi (Red Hat package)
python3.12-jsonschema-specifications (Red Hat package)
python3.12-pytz (Red Hat package)
python3.12-uuid6 (Red Hat package)
python3.12-dispatcherd (Red Hat package)
python3.12-diff-match-patch (Red Hat package)
Ansible Automation Platform

How to mitigate CVE-2026-1285

Install updates from vendor's website.

Django - addressed in versions 4.2.28, 5.2.11, 6.0.2
Maximo Application Suite - Edge Data Collector - addressed in versions 8.11.27, 9.0.19, 9.1.9
ansible-sign (Red Hat package) - addressed in versions 0.1.4-2.el8ap, 0.1.4-2.el9ap
python3.12-rfc3339-validator (Red Hat package) - addressed in versions 0.1.4-2.el8ap, 0.1.4-2.el9ap
python3.12-ruamel-yaml-clib (Red Hat package) - addressed in versions 0.2.15-2.el8ap, 0.2.15-2.el9ap
python3.12-nh3 (Red Hat package) - addressed in versions 0.2.18-2.el8ap, 0.2.18-2.el9ap
python3.12-pyasn1-modules (Red Hat package) - addressed in versions 0.3.0-2.el8ap, 0.3.0-2.el9ap
python3.12-insights-analytics-collector (Red Hat package) - addressed in versions 0.3.2-3.el8ap, 0.3.2-3.el9ap
python3.12-jsonschema-path (Red Hat package) - addressed in versions 0.3.4-2.el8ap, 0.3.4-2.el9ap
python3.12-drools-jpy (Red Hat package) - addressed in versions 0.3.10-2.el8ap, 0.3.10-2.el9ap
python3.12-distlib (Red Hat package) - addressed in versions 0.4.0-2.el8ap, 0.4.0-2.el9ap
python3.12-propcache (Red Hat package) - addressed in versions 0.4.1-1.el8ap, 0.4.1-1.el9ap
python3.12-subprocess-tee (Red Hat package) - addressed in versions 0.4.2-2.el8ap, 0.4.2-2.el9ap
python3.12-pathable (Red Hat package) - addressed in versions 0.4.3-2.el8ap, 0.4.3-2.el9ap
python3.12-colorama (Red Hat package) - addressed in versions 0.4.6-2.el8ap, 0.4.6-2.el9ap
python3.12-json-stream-rs-tokenizer (Red Hat package) - addressed in versions 0.4.26-2.el8ap, 0.4.26-2.el9ap
python3.12-galaxy-importer (Red Hat package) - addressed in versions 0.4.37-3.el8ap, 0.4.37-3.el9ap
python3.12-pyasn1 (Red Hat package) - addressed in versions 0.5.1-2.el8ap, 0.5.1-2.el9ap
python3.12-inflection (Red Hat package) - addressed in versions 0.5.1-5.el8ap, 0.5.1-5.el9ap
python3.12-gnupg (Red Hat package) - addressed in versions 0.5.2-2.el8ap, 0.5.2-2.el9ap
python3.12-sqlparse (Red Hat package) - addressed in versions 0.5.3-3.el8ap, 0.5.3-3.el9ap
aap-metrics-utility (Red Hat package) - addressed in versions 0.6.0-2.1.el8ap, 0.6.0-2.1.el9ap
python3.12-isodate (Red Hat package) - addressed in versions 0.6.1-3.el8ap, 0.6.1-3.el9ap
python3.12-openapi-schema-validator (Red Hat package) - addressed in versions 0.6.2-2.el8ap, 0.6.2-2.el9ap
python3.12-ptyprocess (Red Hat package) - addressed in versions 0.7.0-2.el8ap, 0.7.0-2.el9ap
python3.12-mccabe (Red Hat package) - addressed in versions 0.7.0-3.el8ap, 0.7.0-3.el9ap
python3.12-openapi-spec-validator (Red Hat package) - addressed in versions 0.7.1-2.el8ap, 0.7.1-2.el9ap
python3.12-defusedxml (Red Hat package) - addressed in versions 0.7.1-5.el8ap, 0.7.1-5.el9ap
python3.12-django-crum (Red Hat package) - addressed in versions 0.7.9-3.el8ap, 0.7.9-3.el9ap
python3.12-pytest-plus (Red Hat package) - addressed in versions 0.8.1-2.el8ap, 0.8.1-2.el9ap
python3.12-tabulate (Red Hat package) - addressed in versions 0.9.0-4.el8ap, 0.9.0-4.el9ap
python3.12-commonmark (Red Hat package) - addressed in versions 0.9.1-7.el8ap, 0.9.1-7.el9ap
python3.12-click-help-colors (Red Hat package) - addressed in versions 0.9.4-2.el8ap, 0.9.4-2.el9ap
python3.12-s3transfer (Red Hat package) - addressed in versions 0.10.0-2.el8ap, 0.10.0-2.el9ap
python3.12-pathspec (Red Hat package) - addressed in versions 0.12.1-2.el8ap, 0.12.1-2.el9ap
python3.12-lockfile (Red Hat package) - addressed in versions 0.12.2-3.el8ap, 0.12.2-3.el9ap
python3.12-rq-scheduler (Red Hat package) - addressed in versions 0.14.0-1.el8ap, 0.14.0-1.el9ap
python3.12-jpy (Red Hat package) - addressed in versions 0.15.0-2.el8ap, 0.15.0-2.el9ap
python3.12-ecdsa (Red Hat package) - addressed in versions 0.18.0-2.el8ap, 0.18.0-2.el9ap
python3.12-rpds-py (Red Hat package) - addressed in versions 0.18.1-3.el8ap, 0.18.1-3.el9ap
python3.12-ruamel-yaml (Red Hat package) - addressed in versions 0.18.15-2.el8ap, 0.18.15-2.el9ap
python3.12-prometheus-client (Red Hat package) - addressed in versions 0.19.0-2.el8ap, 0.19.0-2.el9ap
python3.12-openapi-core (Red Hat package) - addressed in versions 0.19.1-2.el8ap, 0.19.1-2.el9ap
python3.12-pulp-glue (Red Hat package) - addressed in versions 0.23.2-2.el8ap, 0.23.2-2.el9ap
python3.12-pulp-ansible (Red Hat package) - addressed in versions 0.25.1-2.el8ap, 0.25.1-2.el9ap
python3.12-drf-spectacular (Red Hat package) - addressed in versions 0.26.5-3.el8ap, 0.26.5-3.el9ap
python3.12-validators (Red Hat package) - addressed in versions 0.34.0-2.el8ap, 0.34.0-2.el9ap
python3.12-referencing (Red Hat package) - addressed in versions 0.36.2-3.el8ap, 0.36.2-3.el9ap
python3.12-wheel (Red Hat package) - update to 0.41.2-4.el8_10
python3.12-drf-nested-routers (Red Hat package) - addressed in versions 0.93.5-2.el8ap, 0.93.5-2.el9ap
python3.12-mypy-extensions (Red Hat package) - addressed in versions 1.0.0-2.el8ap, 1.0.0-2.el9ap
python3.12-ansible-sdk (Red Hat package) - addressed in versions 1.0.0-3.el8ap, 1.0.0-3.el9ap
python3.12-janus (Red Hat package) - addressed in versions 1.0.0-3.el8ap, 1.0.0-3.el9ap
python3.12-ldap-filter (Red Hat package) - addressed in versions 1.0.1-2.el8ap, 1.0.1-2.el9ap
python3.12-resolvelib (Red Hat package) - addressed in versions 1.0.1-2.el8ap, 1.0.1-2.el9ap
python3.12-jmespath (Red Hat package) - addressed in versions 1.0.1-3.el8ap, 1.0.1-3.el9ap
python3.12-asyncio-throttle (Red Hat package) - addressed in versions 1.0.2-5.el8ap, 1.0.2-5.el9ap
python3.12-persisting-theory (Red Hat package) - addressed in versions 1.0-3.el8ap, 1.0-3.el9ap
python3.12-crontab (Red Hat package) - addressed in versions 1.0.5-1.el8ap, 1.0.5-1.el9ap
automation-controller-fapolicyd (Red Hat package) - addressed in versions 1.0-6.el8ap, 1.0-6.el9ap
python3.12-djangorestframework-queryfields (Red Hat package) - addressed in versions 1.1.0-2.el8ap, 1.1.0-2.el9ap
python3.12-et-xmlfile (Red Hat package) - addressed in versions 1.1.0-4.el8ap, 1.1.0-4.el9ap
python3.12-pytest-sugar (Red Hat package) - addressed in versions 1.1.1-2.el8ap, 1.1.1-2.el9ap
python3.12-django-lifecycle (Red Hat package) - addressed in versions 1.1.2-2.el8ap, 1.1.2-2.el9ap
ansible-rulebook (Red Hat package) - addressed in versions 1.1.7-2.el8ap, 1.1.7-2.el9ap
automation-eda-controller (Red Hat package) - addressed in versions 1.1.16-1.el8ap, 1.1.16-1.el9ap
python3.12-brotli (Red Hat package) - addressed in versions 1.2.0-1.el8ap, 1.2.0-1.el9ap
python3.12-django-split-settings (Red Hat package) - addressed in versions 1.2.0-3.el8ap, 1.2.0-3.el9ap
python3.12-netaddr (Red Hat package) - addressed in versions 1.2.1-2.el8ap, 1.2.1-2.el9ap
python3.12-ansible-pylibssh (Red Hat package) - addressed in versions 1.2.2-2.el8ap, 1.2.2-2.el9ap
python3.12-enrich (Red Hat package) - addressed in versions 1.2.7-3.el8ap, 1.2.7-3.el9ap
python3.12-deprecated (Red Hat package) - addressed in versions 1.2.14-2.el8ap, 1.2.14-2.el9ap
python3.12-onigurumacffi (Red Hat package) - addressed in versions 1.3.0-2.el8ap, 1.3.0-2.el9ap
python3.12-xlwt (Red Hat package) - addressed in versions 1.3.0-5.el8ap, 1.3.0-5.el9ap
python3.12-requests-oauthlib (Red Hat package) - addressed in versions 1.3.1-2.el8ap, 1.3.1-2.el9ap
python3.12-parsley (Red Hat package) - addressed in versions 1.3-4.el8ap, 1.3-4.el9ap
python3.12-xmlsec (Red Hat package) - addressed in versions 1.3.13-3.el8ap, 1.3.13-3.el9ap
python3.12-aiosignal (Red Hat package) - addressed in versions 1.4.0-1.el8ap, 1.4.0-1.el9ap
python3.12-frozenlist (Red Hat package) - addressed in versions 1.4.0-2.el8ap, 1.4.0-2.el9ap
python3.12-odfpy (Red Hat package) - addressed in versions 1.4.1-9.el8ap, 1.4.1-9.el9ap
python3.12-url-normalize (Red Hat package) - addressed in versions 1.4.3-6.el8ap, 1.4.3-6.el9ap
python3.12-drf-access-policy (Red Hat package) - addressed in versions 1.5.0-2.el8ap, 1.5.0-2.el9ap
python3.12-freezegun (Red Hat package) - addressed in versions 1.5.5-1.el8ap, 1.5.5-1.el9ap
python3.12-jwcrypto (Red Hat package) - addressed in versions 1.5.6-2.el8ap, 1.5.6-2.el9ap
python3.12-jq (Red Hat package) - addressed in versions 1.6.0-2.el8ap, 1.6.0-2.el9ap
python3.12-pluggy (Red Hat package) - addressed in versions 1.6.0-2.el8ap, 1.6.0-2.el9ap
python3.12-pyproject-api (Red Hat package) - addressed in versions 1.6.1-2.el8ap, 1.6.1-2.el9ap
receptor (Red Hat package) - addressed in versions 1.6.3-4.el8ap, 1.6.3-4.el9ap
python3.12-uamqp (Red Hat package) - addressed in versions 1.6.8-2.el8ap, 1.6.8-2.el9ap
python-django (Ubuntu package) - addressed in versions 1.6.11-0ubuntu1.3+esm10, 1.8.7-1ubuntu5.15+esm11, 1:1.11.11-1ubuntu1.21+esm14, 2:2.2.12-1ubuntu0.29+esm7, 2:3.2.12-2ubuntu1.25, 3:4.2.11-1ubuntu1.14, 3:5.2.4-1ubuntu2.3
python3.12-websocket-client (Red Hat package) - addressed in versions 1.7.0-3.el8ap, 1.7.0-3.el9ap
python3.12-distro (Red Hat package) - addressed in versions 1.9.0-2.el8ap, 1.9.0-2.el9ap
python3.12-lazy-object-proxy (Red Hat package) - addressed in versions 1.10.0-2.el8ap, 1.10.0-2.el9ap
python3.12-pydantic (Red Hat package) - addressed in versions 1.10.15-2.el8ap, 1.10.15-2.el9ap
python3.12-django-storages (Red Hat package) - update to 1.14.2-3.el8ap
python3.12-markuppy (Red Hat package) - addressed in versions 1.14-5.el8ap, 1.14-5.el9ap
python3.12-django-dynamic-preferences (Red Hat package) - addressed in versions 1.16.0-2.el8ap, 1.16.0-2.el9ap
python3.12-wrapt (Red Hat package) - addressed in versions 1.16.0-2.el8ap, 1.16.0-2.el9ap
python3.12-python3-saml (Red Hat package) - addressed in versions 1.16.0-3.el8ap, 1.16.0-3.el9ap
python3.12-six (Red Hat package) - addressed in versions 1.17.0-1.el8ap, 1.17.0-1.el9ap
python3.12-yarl (Red Hat package) - addressed in versions 1.18.3-1.el8ap, 1.18.3-1.el9ap
python3.12-parse (Red Hat package) - addressed in versions 1.20.1-2.el8ap, 1.20.1-2.el9ap
python3.12-opentelemetry (Red Hat package) - addressed in versions 1.28.0-1.el8ap, 1.28.0-1.el9ap
python3.12-opentelemetry-contrib (Red Hat package) - addressed in versions 1.28.0-1.el8ap, 1.28.0-1.el9ap
python3.12-azure-core (Red Hat package) - addressed in versions 1.34.0-2.el8ap, 1.34.0-2.el9ap
python3.12-boto3 (Red Hat package) - addressed in versions 1.34.30-2.el8ap, 1.34.30-2.el9ap
python3.12-botocore (Red Hat package) - addressed in versions 1.34.162-2.el8ap, 1.34.162-2.el9ap
yamllint (Red Hat package) - addressed in versions 1.35.1-2.el8ap, 1.35.1-2.el9ap
python3.12-xds-protos (Red Hat package) - addressed in versions 1.71.2-1.el8ap, 1.71.2-1.el9ap
python3.12-grpcio (Red Hat package) - addressed in versions 1.71.2-1.el8ap, 1.71.2-1.el9ap
python3.12-googleapis-common-protos (Red Hat package) - addressed in versions 1.72.0-1.el8ap, 1.72.0-1.el9ap
python3.12-iniconfig (Red Hat package) - addressed in versions 2.0.0-2.el8ap, 2.0.0-2.el9ap
pulpcore-selinux (Red Hat package) - addressed in versions 2.0.1-2.el8ap, 2.0.1-2.el9ap
python3.12-croniter (Red Hat package) - addressed in versions 2.0.1-2.el8ap, 2.0.1-2.el9ap
python3.12-xlrd (Red Hat package) - addressed in versions 2.0.1-7.el8ap, 2.0.1-7.el9ap
python3.12-async-lru (Red Hat package) - addressed in versions 2.0.5-1.el8ap, 2.0.5-1.el9ap
uwsgi (Red Hat package) - addressed in versions 2.0.28-2.el8ap, 2.0.28-2.el9ap
python3.12-execnet (Red Hat package) - addressed in versions 2.1.2-2.el8ap, 2.1.2-2.el9ap
python3.12-markupsafe (Red Hat package) - addressed in versions 2.1.5-2.el8ap, 2.1.5-2.el9ap
python3.12-dpath (Red Hat package) - addressed in versions 2.1.6-2.el8ap, 2.1.6-2.el9ap
python3.12-backoff (Red Hat package) - addressed in versions 2.2.1-2.el8ap, 2.2.1-2.el9ap
python3-Django - addressed in versions 2.2.27-21, 4.2.15-12
python-django - addressed in versions 2.2.27-21, 4.2.15-12
python-django-help - addressed in versions 2.2.27-21, 4.2.15-12
python3.12-django-oauth-toolkit (Red Hat package) - addressed in versions 2.3.0-2.el8ap, 2.3.0-2.el9ap
python3.12-django-prometheus (Red Hat package) - addressed in versions 2.3.1-3.el8ap, 2.3.1-3.el9ap
python3.12-json-stream (Red Hat package) - addressed in versions 2.3.2-2.el8ap, 2.3.2-2.el9ap
python3.12-bracex (Red Hat package) - addressed in versions 2.4-2.el8ap, 2.4-2.el9ap
ansible-runner (Red Hat package) - addressed in versions 2.4.2-3.el8ap, 2.4.2-3.el9ap
python3.12-pyrad (Red Hat package) - addressed in versions 2.4-3.el8ap, 2.4-3.el9ap
Ansible Automation Platform - addressed in versions 2.5, 2.6
python3.12-pygtrie (Red Hat package) - addressed in versions 2.5.0-3.el8ap, 2.5.0-3.el9ap
ansible-automation-platform-installer (Red Hat package) - addressed in versions 2.5-21.el8ap, 2.5-21.el9ap
python3.12-django-ansible-base (Red Hat package) - addressed in versions 2.5.20260225-1.el8ap, 2.5.20260225-1.el9ap
automation-gateway (Red Hat package) - addressed in versions 2.5.20260225-1.el8ap, 2.5.20260225-1.el9ap
python3.12-aiohappyeyeballs (Red Hat package) - addressed in versions 2.6.1-1.el8ap, 2.6.1-1.el9ap
python3.12-rq (Red Hat package) - addressed in versions 2.6.1-1.el8ap, 2.6.1-1.el9ap
python3.12-tacacs-plus (Red Hat package) - addressed in versions 2.6-3.el8ap, 2.6-3.el9ap
python3.12-urllib3 (Red Hat package) - addressed in versions 2.6.3-2.el8ap, 2.6.3-2.el9ap
python3.12-pyjwt (Red Hat package) - addressed in versions 2.7.0-3.el8ap, 2.7.0-3.el9ap
python3.12-dateutil (Red Hat package) - addressed in versions 2.8.2-3.el8ap, 2.8.2-3.el9ap
python3.12-semantic-version (Red Hat package) - addressed in versions 2.10.0-3.el8ap, 2.10.0-3.el9ap
python3.12-pycodestyle (Red Hat package) - addressed in versions 2.11.1-2.el8ap, 2.11.1-2.el9ap
bindep (Red Hat package) - addressed in versions 2.13.0-2.el8ap, 2.13.0-2.el9ap
ansible-core (Red Hat package) - addressed in versions 2.16.16-1.el8ap, 2.16.16-1.el9ap
python3.12-pygments (Red Hat package) - addressed in versions 2.17.2-3.el8ap, 2.17.2-3.el9ap
python3.12-pulp-container (Red Hat package) - addressed in versions 2.19.3-2.el8ap, 2.19.3-2.el9ap
python3.12-google-auth (Red Hat package) - addressed in versions 2.27.0-2.el8ap, 2.27.0-2.el9ap
python3.12-requests (Red Hat package) - addressed in versions 2.31.0-4.el8ap, 2.31.0-4.el9ap
python3.12-werkzeug (Red Hat package) - addressed in versions 3.0.3-2.el8ap, 3.0.3-2.el9ap
python3.12-django-ipware (Red Hat package) - addressed in versions 3.0.7-4.el8ap, 3.0.7-4.el9ap
python3.12-pyflakes (Red Hat package) - addressed in versions 3.1.0-2.el8ap, 3.1.0-2.el9ap
python3.12-termcolor (Red Hat package) - addressed in versions 3.1.0-2.el8ap, 3.1.0-2.el9ap
ansible-builder (Red Hat package) - addressed in versions 3.1.1-1.2.el8ap, 3.1.1-1.2.el9ap
python3.12-pyparsing (Red Hat package) - addressed in versions 3.1.1-2.el8ap, 3.1.1-2.el9ap
python3.12-django-picklefield (Red Hat package) - addressed in versions 3.1-2.el8ap, 3.1-2.el9ap
python3.12-openpyxl (Red Hat package) - addressed in versions 3.1.2-2.el8ap, 3.1.2-2.el9ap
python3.12-daemon (Red Hat package) - addressed in versions 3.1.2-3.el8ap, 3.1.2-3.el9ap
python3.12-jinja2 (Red Hat package) - addressed in versions 3.1.6-2.el8ap, 3.1.6-2.el9ap
python3.12-gitpython (Red Hat package) - addressed in versions 3.1.41-2.el8ap, 3.1.41-2.el9ap
python3.12-aiodns (Red Hat package) - addressed in versions 3.2.0-2.el8ap, 3.2.0-2.el9ap
python3.12-python3-openid (Red Hat package) - addressed in versions 3.2.0-4.el8ap, 3.2.0-4.el9ap
python3.12-django-rq (Red Hat package) - addressed in versions 3.2.2-1.el8ap, 3.2.2-1.el9ap
python3.12-oauthlib (Red Hat package) - addressed in versions 3.2.2-2.el8ap, 3.2.2-2.el9ap
python3.12-psycopg (Red Hat package) - addressed in versions 3.2.7-2.el8ap, 3.2.7-2.el9ap
python3.12-dynaconf (Red Hat package) - addressed in versions 3.2.11-2.el8ap, 3.2.11-2.el9ap
python-django (Debian package) - addressed in versions 3:3.2.25-0+deb12u2, 3:4.2.28-0+deb13u1
python3.12-django-import-export (Red Hat package) - addressed in versions 3.3.6-3.el8ap, 3.3.6-3.el9ap
python3.12-django-guid (Red Hat package) - addressed in versions 3.4.0-2.el8ap, 3.4.0-2.el9ap
python3.12-xxhash (Red Hat package) - addressed in versions 3.4.1-2.el8ap, 3.4.1-2.el9ap
python3.12-ldap (Red Hat package) - addressed in versions 3.4.5-1.el8ap, 3.4.5-1.el9ap
python3.12-tablib (Red Hat package) - addressed in versions 3.5.0-2.el8ap, 3.5.0-2.el9ap
python3.12-markdown (Red Hat package) - addressed in versions 3.5.2-2.el8ap, 3.5.2-2.el9ap
python3.12-asgiref (Red Hat package) - addressed in versions 3.7.2-2.el8ap, 3.7.2-2.el9ap
python3.12-pytest-xdist (Red Hat package) - addressed in versions 3.8.0-2.el8ap, 3.8.0-2.el9ap
python3.12-filelock (Red Hat package) - addressed in versions 3.13.1-2.el8ap, 3.13.1-2.el9ap
python3.12-aiohttp (Red Hat package) - addressed in versions 3.13.3-2.el8ap, 3.13.3-2.el9ap
python3.12-djangorestframework (Red Hat package) - addressed in versions 3.15.1-2.el8ap, 3.15.1-2.el9ap
python3.12-zipp (Red Hat package) - addressed in versions 3.19.2-2.el8ap, 3.19.2-2.el9ap
python3.12-marshmallow (Red Hat package) - addressed in versions 3.26.2-1.el8ap, 3.26.2-1.el9ap
python3.12-pulpcore (Red Hat package) - addressed in versions 3.49.50-1.el8ap, 3.49.50-1.el9ap
python3.12-django-auth-ldap (Red Hat package) - addressed in versions 4.0.0-3.el8ap, 4.0.0-3.el9ap
python3.12-daphne (Red Hat package) - addressed in versions 4.0.0-4.el8ap, 4.0.0-4.el9ap
python3.12-channels (Red Hat package) - addressed in versions 4.0.0-4.el8ap, 4.0.0-4.el9ap
python3.12-gitdb (Red Hat package) - addressed in versions 4.0.11-2.el8ap, 4.0.11-2.el9ap
python3.12-uritemplate (Red Hat package) - addressed in versions 4.1.1-4.el8ap, 4.1.1-4.el9ap
python3.12-django-extensions (Red Hat package) - addressed in versions 4.1-2.el8ap, 4.1-2.el9ap
python3.12-platformdirs (Red Hat package) - addressed in versions 4.2.0-2.el8ap, 4.2.0-2.el9ap
supervisor (Red Hat package) - addressed in versions 4.2.5-2.el8ap, 4.2.5-2.el9ap
python311-Django - update to 4.2.11-150600.3.47.1
python3-django-bash-completion - update to 4.2.16-6
python3-django-doc - update to 4.2.16-6
python3-django - update to 4.2.16-6
python3.12-django (Red Hat package) - addressed in versions 4.2.28-1.el8ap, 4.2.28-1.el9ap
python-django4.2 - addressed in versions 4.2.28-1.el9, 4.2.28-1.fc42
python3.12-pycares (Red Hat package) - addressed in versions 4.4.0-3.el8ap, 4.4.0-3.el9ap
python3.12-social-auth-core (Red Hat package) - addressed in versions 4.5.4-2.el8ap, 4.5.4-2.el9ap
python3.12-redis (Red Hat package) - addressed in versions 4.6.0-3.el8ap, 4.6.0-3.el9ap
automation-controller (Red Hat package) - addressed in versions 4.6.26-1.el8ap, 4.6.26-1.el9ap
python3.12-pexpect (Red Hat package) - addressed in versions 4.9.0-2.el8ap, 4.9.0-2.el9ap
python3.12-rsa (Red Hat package) - addressed in versions 4.9-3.el8ap, 4.9-3.el9ap
python3.12-galaxy-ng (Red Hat package) - addressed in versions 4.10.12-1.el8ap, 4.10.12-1.el9ap
automation-hub (Red Hat package) - addressed in versions 4.10.12-1.el8ap, 4.10.12-1.el9ap
python3.12-typing-extensions (Red Hat package) - addressed in versions 4.15.0-2.el8ap, 4.15.0-2.el9ap
python3.12-tox (Red Hat package) - addressed in versions 4.15.1-2.el8ap, 4.15.1-2.el9ap
python3.12-jsonschema (Red Hat package) - addressed in versions 4.21.1-2.el8ap, 4.21.1-2.el9ap
python3.12-smmap (Red Hat package) - addressed in versions 5.0.1-2.el8ap, 5.0.1-2.el9ap
python3.12-watchdog (Red Hat package) - addressed in versions 5.0.2-2.el8ap, 5.0.2-2.el9ap
python3.12-django-flags (Red Hat package) - addressed in versions 5.0.13-2.el8ap, 5.0.13-2.el9ap
python3.12-chardet (Red Hat package) - addressed in versions 5.2.0-3.el8ap, 5.2.0-3.el9ap
python-django5 - addressed in versions 5.2.11-1.fc42, 5.2.11-1.fc43
python3.12-lxml (Red Hat package) - addressed in versions 5.3.0-2.el8ap, 5.3.0-2.el9ap
python3.12-cachetools (Red Hat package) - addressed in versions 5.3.2-2.el8ap, 5.3.2-2.el9ap
python3.12-podman (Red Hat package) - addressed in versions 5.4.0.1-2.el8ap, 5.4.0.1-2.el9ap
python3.12-django-redis (Red Hat package) - addressed in versions 5.4.0-2.el8ap, 5.4.0-2.el9ap
python3.12-social-auth-app-django (Red Hat package) - addressed in versions 5.4.1-2.el8ap, 5.4.1-2.el9ap
python3.12-protobuf (Red Hat package) - addressed in versions 5.29.6-1.el8ap, 5.29.6-1.el9ap
python3.12-pbr (Red Hat package) - addressed in versions 6.0.0-3.el8ap, 6.0.0-3.el9ap
python3.12-importlib-metadata (Red Hat package) - addressed in versions 6.0.1-3.el8ap, 6.0.1-3.el9ap
python3.12-multidict (Red Hat package) - addressed in versions 6.0.4-2.el8ap, 6.0.4-2.el9ap
python3.12-flake8 (Red Hat package) - addressed in versions 6.1.0-3.el8ap, 6.1.0-3.el9ap
python3.12-zope-interface (Red Hat package) - addressed in versions 6.1-2.el8ap, 6.1-2.el9ap
python3.12-whitenoise (Red Hat package) - addressed in versions 6.6.0-2.el8ap, 6.6.0-2.el9ap
python3.12-click (Red Hat package) - addressed in versions 8.1.7-2.el8ap, 8.1.7-2.el9ap
python3.12-wcmatch (Red Hat package) - addressed in versions 8.5-2.el8ap, 8.5-2.el9ap
python3.12-pytest (Red Hat package) - addressed in versions 9.0.1-2.el8ap, 9.0.1-2.el9ap
python3.12-more-itertools (Red Hat package) - addressed in versions 10.2.0-2.el8ap, 10.2.0-2.el9ap
python3.12-pillow (Red Hat package) - addressed in versions 10.3.0-2.el8ap, 10.3.0-2.el9ap
python3.12-pillow-debugsource (Red Hat package) - update to 10.3.0-2.el9ap
python3.12-azure-storage-blob (Red Hat package) - update to 12.19.0-2.el8ap
python3.12-rich (Red Hat package) - addressed in versions 13.1.0-2.el8ap, 13.1.0-2.el9ap
python3.12-websockets (Red Hat package) - addressed in versions 15.0-3.el8ap, 15.0-3.el9ap
python3.12-virtualenv (Red Hat package) - addressed in versions 20.25.1-2.el8ap, 20.25.1-2.el9ap
python3.12-hyperlink (Red Hat package) - addressed in versions 21.0.0-3.el8ap, 21.0.0-3.el9ap
python3.12-service-identity (Red Hat package) - addressed in versions 21.1.0-3.el8ap, 21.1.0-3.el9ap
python3.12-argon2-cffi-bindings (Red Hat package) - addressed in versions 21.2.0-2.el8ap, 21.2.0-2.el9ap
python3.12-attrs (Red Hat package) - addressed in versions 22.2.0-2.el8ap, 22.2.0-2.el9ap
python3.12-Automat (Red Hat package) - addressed in versions 22.10.0-4.el8ap, 22.10.0-4.el9ap
python3.12-gunicorn (Red Hat package) - addressed in versions 23.0.0-2.el8ap, 23.0.0-2.el9ap
python3.12-argon2-cffi (Red Hat package) - addressed in versions 23.1.0-2.el8ap, 23.1.0-2.el9ap
python3.12-txaio (Red Hat package) - addressed in versions 23.1.1-3.el8ap, 23.1.1-3.el9ap
python3.12-aiofiles (Red Hat package) - addressed in versions 23.2.1-2.el8ap, 23.2.1-2.el9ap
python3.12-packaging (Red Hat package) - addressed in versions 23.2-2.el8, 23.2-2.el9
python3.12-django-filter (Red Hat package) - addressed in versions 23.5-2.el8ap, 23.5-2.el9ap
python3.12-constantly (Red Hat package) - addressed in versions 23.10.4-1.el8ap, 23.10.4-1.el9ap
python3.12-pyOpenSSL (Red Hat package) - addressed in versions 24.1.0-2.el8ap, 24.1.0-2.el9ap
python3.12-autobahn (Red Hat package) - addressed in versions 24.4.2-2.el8ap, 24.4.2-2.el9ap
python3.12-black (Red Hat package) - addressed in versions 24.4.2-3.el8ap, 24.4.2-3.el9ap
python3.12-twisted (Red Hat package) - addressed in versions 24.7.0-2.el8ap, 24.7.0-2.el9ap
python3.12-incremental (Red Hat package) - addressed in versions 24.7.2-2.el8ap, 24.7.2-2.el9ap
ansible-creator (Red Hat package) - addressed in versions 25.12.0-1.1.el8ap, 25.12.0-1.1.el9ap
molecule (Red Hat package) - addressed in versions 25.12.0-2.el8ap, 25.12.0-2.el9ap
python3.12-pytest-ansible (Red Hat package) - addressed in versions 25.12.0-2.el8ap, 25.12.0-2.el9ap
python3.12-tox-ansible (Red Hat package) - addressed in versions 25.12.0-2.el8ap, 25.12.0-2.el9ap
python3.12-ansible-compat (Red Hat package) - addressed in versions 25.12.0-3.el8ap, 25.12.0-3.el9ap
ansible-dev-environment (Red Hat package) - addressed in versions 25.12.2-1.2.el8ap, 25.12.2-1.2.el9ap
python3.12-kubernetes (Red Hat package) - addressed in versions 26.1.0-3.el8ap, 26.1.0-3.el9ap
ansible-dev-tools (Red Hat package) - addressed in versions 26.1.0-3.el8ap, 26.1.0-3.el9ap
ansible-lint (Red Hat package) - addressed in versions 26.1.0-3.el8ap, 26.1.0-3.el9ap
ansible-navigator (Red Hat package) - addressed in versions 26.1.1-1.1.el8ap, 26.1.1-1.1.el9ap
python3.12-cryptography (Red Hat package) - addressed in versions 42.0.5-2.el8ap, 42.0.5-2.el9ap
python3.12-setuptools (Red Hat package) - update to 68.2.2-5.el9_6
python3.12-certifi (Red Hat package) - addressed in versions 2023.5.7-2.el8ap, 2023.5.7-2.el9ap
python3.12-jsonschema-specifications (Red Hat package) - addressed in versions 2023.12.1-2.el8ap, 2023.12.1-2.el9ap
python3.12-pytz (Red Hat package) - addressed in versions 2024.1-2.el8ap, 2024.1-2.el9ap
python3.12-uuid6 (Red Hat package) - addressed in versions 2024.1.12-2.el8ap, 2024.1.12-2.el9ap
python3.12-dispatcherd (Red Hat package) - addressed in versions 2025.5.19-3.el8ap, 2025.5.19-3.el9ap
python3.12-diff-match-patch (Red Hat package) - addressed in versions 20230430-2.el8ap, 20230430-2.el9ap

External References

Related Security Bulletins