CVE-2024-28865

django-wiki is a wiki system for Django. Installations of django-wiki prior to version 0.10.1 are vulnerable to maliciously crafted article content that can cause severe use of server CPU through a regular expression loop. Version 0.10.1 fixes this issue. As a workaround, close off access to create and edit articles by anonymous users.

• CWE-1333

• https://github.com/django-wiki/django-wiki/commit/8e280fd6c0bd27ce847c67b2d216c6cbf920f88cPatch
• https://github.com/django-wiki/django-wiki/security/advisories/GHSA-wj85-w4f4-xh8hVendor Advisory
• https://github.com/django-wiki/django-wiki/commit/8e280fd6c0bd27ce847c67b2d216c6cbf920f88cPatch
• https://github.com/django-wiki/django-wiki/security/advisories/GHSA-wj85-w4f4-xh8hVendor Advisory

Published

Mar 18, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-2886Use after free in WebCodecs in Google Chrome prior to 123.0.…7.5
• CVE-2024-28860Cilium is a networking, observability, and security solution…6.8
• CVE-2024-28861Symfony 1 is a community-driven fork of the 1.x branch of Sy…9.8
• CVE-2024-28862The Ruby One Time Password library (ROTP) is an open source …5.5
• CVE-2024-28863node-tar is a Tar for Node.js. node-tar prior to version 6.2…6.5
• CVE-2024-28864SecureProps is a PHP library designed to simplify the encryp…2.6
• CVE-2024-28866GoCD is a continuous delivery server. GoCD versions from 19.…6.1
• CVE-2024-28867Swift Prometheus is a Swift client for the Prometheus monito…7.4
• CVE-2024-28868Umbraco is an ASP.NET content management system. Umbraco 10 …5.3
• CVE-2024-28869Traefik is an HTTP reverse proxy and load balancer. In affec…7.5
• CVE-2024-2887Type Confusion in WebAssembly in Google Chrome prior to 123.…7.7
• CVE-2024-28870Suricata is a network Intrusion Detection System, Intrusion …7.5