---
title: "Django 4.2.20 release notes"
version: 4.2
locale: en
source: https://docs.djangoproject.com/en/4.2/releases/4.2.20/
canonical: https://djangodocs.dev/en/4.2/releases/4.2.20/
---
# Django 4.2.20 release notes

*March 6, 2025*

Django 4.2.20 fixes a security issue with severity “moderate” in 4.2.19.

## CVE-2025-26699: Potential denial-of-service vulnerability in `django.utils.text.wrap()`

The `wrap()` and [`wordwrap`](/en/4.2/ref/templates/builtins/#std-templatefilter-wordwrap) template filter were subject to a
potential denial-of-service attack when used with very long strings.