Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2023-23969
7.5
HIGHCVSS v3
Published
February 1, 2023
Affected
4 projects
Assigned by
MITRE
Severity scale
010
Description
In Django 3.2 before 3.2.17, 4.0 before 4.0.9, and 4.1 before 4.1.6, the parsed values of Accept-Language headers are cached in order to avoid repetitive parsing. This leads to a potential denial-of-service vector via excessive memory usage if the raw value of Accept-Language headers is very large.
django/django
GitHubThe Web framework for perfectionists with deadlines.
GitHubThe Web framework for perfectionists with deadlines.>= 4.1, < 4.1.6, >= 4.0, < 4.0.9, >= 3.2, < 3.2.17NVD
DjangoPython Package IndexA high-level Python web framework that encourages rapid development and clean, pragmatic design.
Python Package IndexA high-level Python web framework that encourages rapid development and clean, pragmatic design.>= 4.1, < 4.1.6, >= 4.0, < 4.0.9, >= 3.2, < 3.2.17NVD
django
Docker Hub
NPM