High severity7.5NVD Advisory· Published Mar 18, 2024· Updated Jun 17, 2026

CVE-2024-28865

Description

django-wiki is a wiki system for Django. Installations of django-wiki prior to version 0.10.1 are vulnerable to maliciously crafted article content that can cause severe use of server CPU through a regular expression loop. Version 0.10.1 fixes this issue. As a workaround, close off access to create and edit articles by anonymous users.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
wikiPyPI	< 0.10.1	0.10.1

Affected products

Django Wiki Project/Django Wiki
cpe:2.3:a:django-wiki_project:django-wiki:*:*:*:*:*:django:*:*
Range: <0.10.1
ghsa-coords
pkg:pypi/wiki
Range: < 0.10.1
Django Wiki/Django Wikiv5
Range: < 0.10.1

Patches

Vulnerability mechanics

References

github.com/django-wiki/django-wiki/commit/8e280fd6c0bd27ce847c67b2d216c6cbf920f88cnvdPatchWEB
github.com/advisories/GHSA-wj85-w4f4-xh8hghsaADVISORY
github.com/django-wiki/django-wiki/security/advisories/GHSA-wj85-w4f4-xh8hnvdVendor AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2024-28865ghsaADVISORY

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000