CVE-2026-1285 | Django up to 4.2.27/5.2.10/6.0.1 django.utils.text.Truncator.chars/Truncator.words algorithmic complexity

A vulnerability was found in Django up to 4.2.27/5.2.10/6.0.1. It has been declared as problematic. Impacted is the function django.utils.text.Truncator.chars/Truncator.words. The manipulation results in inefficient algorithmic complexity.

This vulnerability is identified as CVE-2026-1285. The attack can be executed remotely. There is not any exploit available.

It is recommended to upgrade the affected component.