CVE-2024-56374: Potential denial-of-service vulnerability in IPv6 validation Lack of upper bound limit enforcement in strings passed when performing IPv6 validation could lead to a potential denial-of-service attack. The undocumented and private functions clean_ipv6_address and is_valid_ipv6_address were vulnerable, as was the django.forms.GenericIPAddressField form field, which has now been updated to define a max_length of 39 characters. The django.db.models.GenericIPAddressField model field was not affected. Thanks to Saravana Kumar for the report. This issue has severity "moderate" according to the Django security policy.
cleanup done
