CVE-2025-26699

An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap() method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings.

• CWE-770

• https://docs.djangoproject.com/en/dev/releases/security/Release Notes, Vendor Advisory
• https://groups.google.com/g/django-announceVendor Advisory
• https://www.djangoproject.com/weblog/2025/mar/06/security-releases/Release Notes, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2025/03/06/12Mailing List
• https://lists.debian.org/debian-lts-announce/2025/03/msg00012.htmlMailing List, Third Party Advisory

Published

Mar 6, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-26693in OpenHarmony v5.0.3 and prior versions allow a local attac…5.5
• CVE-2025-26694Null pointer dereference for some Intel(R) QAT Windows softw…6.8
• CVE-2025-26695When requesting an OpenPGP key from a WKD server, an incorre…5.3
• CVE-2025-26696Certain crafted MIME email messages that claimed to contain …7
• CVE-2025-26697Uncontrolled resource consumption in the Linux kernel-mode d…4.8
• CVE-2025-26698Incorrect resource transfer between spheres issue exists in …2.7
• CVE-2025-2670IBM OpenPages 9.0 is vulnerable to information disclosure of…4.3
• CVE-2025-26700Authentication bypass using an alternate path or channel iss…5.2
• CVE-2025-26701An issue was discovered in Percona PMM Server (OVA) before 3…10
• CVE-2025-26702Improper Input Validation vulnerability in ZTE GoldenDB allo…7.5
• CVE-2025-26703Improper Privilege Management vulnerability in ZTE GoldenDB …4.3
• CVE-2025-26704Improper Privilege Management vulnerability in ZTE GoldenDB …4.3