Vulnerability Database

300,445

Total vulnerabilities in the database

CVE-2023-41164

In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uri_to_iri() is subject to a potential DoS (denial of service) attack via certain inputs with a very large number of Unicode characters.

CVSS v3:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWEs:

Software From Fixed in
Python icon Django 3.2 3.2.21
Python icon Django 4.1 4.1.11
Python icon Django 4.2 4.2.5
djangoproject / django 4.2 4.2.5
djangoproject / django 4.1 4.1.11
djangoproject / django 3.2 3.2.21
fedoraproject / fedora 39 39.x