~ / search / GHSA-7h4p-27mh-hmrw

GHSA-7h4p-27mh-hmrw

Django Denial of service vulnerability in django.utils.encoding.uri_to_iri

Source: GitHub Advisory Database (reviewed) Moderate CVE-2023-41164

Packages

EcosystemPackageAffectedFixed in
PyPI Django >= 3.2, < 3.2.21 3.2.21
PyPI Django >= 4.1, < 4.1.11 4.1.11
PyPI Django >= 4.2, < 4.2.5 4.2.5

Details

As written in the advisory (Markdown source, shown as plain text).

In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uri_to_iri() is subject to a potential DoS (denial of service) attack via certain inputs with a very large number of Unicode characters.

References

External links from the advisory. They lead to third-party sites.