CVE-2025-14550

🗓️ 03 Feb 2026 14:38:15Reported by Alpine Linux Development TeamType

CVE-2025-14550 allows remote denial of service via crafted requests with duplicate headers in Django.

Reporter	Title	Published	Views	Family All 112
IBM Security Bulletins	Security Bulletin: Enumeration of users, compromised data confidentiality and integrity, and other vulnerabilities might affect IBM Storage Defender - Resiliency Service	23 Mar 202616:22	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Edge Data Collector uses django-4.2.27-py3-none-any.whl which is vulnerable to CVE-2025-13473, CVE-2025-14550, CVE-2026-1207, CVE-2026-1285, CVE-2026-1287, CVE-2026-1312.	30 Mar 202607:02	–	ibm
ATTACKERKB	CVE-2025-14550	3 Feb 202614:38	–	attackerkb
BDU FSTEC	The vulnerability of the Django web application software platform, related to algorithmic complexity, allows attackers to trigger service failures.	23 Mar 202600:00	–	bdu_fstec
Chainguard	CVE-2025-14550 vulnerabilities	5 Feb 202601:17	–	cgr
Circl	CVE-2025-14550	3 Feb 202615:53	–	circl
CNNVD	Django 安全漏洞	3 Feb 202600:00	–	cnnvd
CVE	CVE-2025-14550	3 Feb 202614:38	–	cve
Cvelist	CVE-2025-14550 Potential denial-of-service vulnerability via repeated headers when using ASGI	3 Feb 202614:38	–	cvelist
Debian	[SECURITY] [DSA 6150-1] python-django security update	26 Feb 202621:47	–	debian

OS	OS Version	Architecture	Package	Package Version	Filename
Alpine Linux	any	any	py3-django	4.2.28-r0	py3-django-4.2.28-r0.apk
Alpine Linux	3.23	any	py3-django	4.2.28-r0	py3-django-4.2.28-r0.apk
Alpine Linux	3.24	any	py3-django	4.2.28-r0	py3-django-4.2.28-r0.apk

17 Jun 2026 08:36Current

5.5Medium risk

Vulners AI Score5.5

CVSS 3.17.5

EPSS0.00993

SSVC