Django has Inefficient Algorithmic Complexity

🗓️ 03 Feb 2026 15:30:23Reported by GitHub Advisory DatabaseType

Django ASGIRequest denial of service via duplicate headers affects six point zero, five two, and four two series.

Reporter	Title	Published	Views	Family All 113
IBM Security Bulletins	Security Bulletin: Enumeration of users, compromised data confidentiality and integrity, and other vulnerabilities might affect IBM Storage Defender - Resiliency Service	23 Mar 202616:22	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Edge Data Collector uses django-4.2.27-py3-none-any.whl which is vulnerable to CVE-2025-13473, CVE-2025-14550, CVE-2026-1207, CVE-2026-1285, CVE-2026-1287, CVE-2026-1312.	30 Mar 202607:02	–	ibm
ATTACKERKB	CVE-2025-14550	3 Feb 202614:38	–	attackerkb
AlpineLinux	CVE-2025-14550	3 Feb 202614:38	–	alpinelinux
BDU FSTEC	The vulnerability of the Django web application software platform, related to algorithmic complexity, allows attackers to trigger service failures.	23 Mar 202600:00	–	bdu_fstec
Chainguard	CVE-2025-14550 vulnerabilities	5 Feb 202601:17	–	cgr
Circl	CVE-2025-14550	3 Feb 202615:53	–	circl
CNNVD	Django 安全漏洞	3 Feb 202600:00	–	cnnvd
CVE	CVE-2025-14550	3 Feb 202614:38	–	cve
Cvelist	CVE-2025-14550 Potential denial-of-service vulnerability via repeated headers when using ASGI	3 Feb 202614:38	–	cvelist

Vulners

Node

django_project djangoRange4.2a1–4.2.28pip

django_project djangoRange5.2a1–5.2.11pip

django_project djangoRange6.0a1–6.0.2pip

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-14550
docs	www.docs.djangoproject.com/en/dev/releases/security
groups	www.groups.google.com/g/django-announce
djangoproject	www.djangoproject.com/weblog/2026/feb/03/security-releases
github	www.github.com/django/django/commit/eb22e1d6d643360e952609ef562c139a100ea4eb
github	www.github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2026-43.yaml
github	www.github.com/advisories/GHSA-33mw-q7rj-mjwj

05 Jun 2026 16:24Current

5.5Medium risk

Vulners AI Score5.5

CVSS 3.17.5

EPSS0.00993

SSVC