---
title: "Django 4.2.11 release notes"
version: 5.1
locale: ko
source: https://docs.djangoproject.com/ko/5.1/releases/4.2.11/
canonical: https://djangodocs.dev/ko/5.1/releases/4.2.11/
---
# Django 4.2.11 release notes

*March 4, 2024*

Django 4.2.11 fixes a security issue with severity “moderate” and a regression
in 4.2.10.

## CVE-2024-27351: Potential regular expression denial-of-service in `django.utils.text.Truncator.words()`

`django.utils.text.Truncator.words()` method (with `html=True`) and
[`truncatewords_html`](/ko/5.1/ref/templates/builtins/#std-templatefilter-truncatewords_html) template filter were subject to a potential
regular expression denial-of-service attack using a suitably crafted string
(follow up to [**CVE 2019-14232**](https://www.cve.org/CVERecord?id=CVE-2019-14232) and [**CVE 2023-43665**](https://www.cve.org/CVERecord?id=CVE-2023-43665)).

## 버그 수정

- Fixed a regression in Django 4.2.10 where `intcomma` template filter could
  return a leading comma for string representation of floats ([#35172](https://code.djangoproject.com/ticket/35172)).