{"id":"CVE-2024-28865","aliases":["GHSA-wj85-w4f4-xh8h","PYSEC-2026-2049"],"title":"Denial of service via regular expression","summary":"Denial of service via regular expression","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","vendor":"wiki","product":"wiki","ecosystem":"pip","affected":["wiki < 0.10.1"],"patched":["wiki 0.10.1"],"published":"2024-03-18","updated":"2026-09-10","sourceUpdated":"2026-09-10T03:50:10.855393421Z","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GHSA-wj85-w4f4-xh8h","references":[{"url":"https://github.com/django-wiki/django-wiki/security/advisories/GHSA-wj85-w4f4-xh8h"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-28865"},{"url":"https://github.com/django-wiki/django-wiki/commit/8e280fd6c0bd27ce847c67b2d216c6cbf920f88c"},{"url":"https://github.com/django-wiki/django-wiki"}],"tags":["osv","pip"],"epss":0.0061,"epssPercentile":0.47556,"ingestedAt":"2026-07-08T18:25:53.820Z","slug":"CVE-2024-28865","body":"## Overview\n\n### Impact\n\nAll historical installations of django-wiki are vulnerable to maliciously crafted article content, that can cause severe use of server CPU through a regular expression loop.\n\n### Patches\n\n\n\n### Workarounds\n\nClose off access to create and edit articles by anonymous users.\n\n### References\n_Are there any links users can visit to find out more?_\n\n\n## Affected packages\n\n- `wiki < 0.10.1`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `wiki 0.10.1`","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}