Fix CVE-2024-27351 in Django HIGH
Fix CVE-2024-27351 (ReDoS in strip_tags) in Django for PyPI. Paste your requirements.txt into PackageFix and get a patched version back — no CLI, no signup.
⚠ Vulnerability
CVE-2024-27351 — ReDoS in strip_tags in Django. Update to 4.2.13 or later.
Vulnerable Version — requirements.txt
Django==3.2.0
Fixed Version — requirements.txt
Django==4.2.13
✓ Fix
Update to 4.2.13 and run pip install -r requirements.txt to apply the fix.
Scan your dependencies now — paste your manifest, get a fixed version back in seconds.
Open PackageFix →No signup · No CLI · No GitHub connection · Runs 100% in your browser
Frequently Asked Questions
What is CVE-2024-27351?
CVE-2024-27351 is a vulnerability in Django that allows ReDoS in strip_tags. Update to version 4.2.13 or later to fix it.
Is CVE-2024-27351 on the CISA KEV catalog?
Check the live CISA KEV catalog at packagefix.dev — the catalog updates daily and PackageFix always reflects the current status.
How do I fix CVE-2024-27351 in Django?
Update Django to version 4.2.13 or later in your requirements.txt. Run pip install -r requirements.txt after updating.
Does CVE-2024-27351 affect all versions of Django?
Check the OSV advisory for the exact affected version range. PackageFix shows the minimum safe version for your installed version.