CVE-2026-15337

🗓️ 04 Aug 2026 15:48:25Reported by MendType

mend🔗 www.mend.io👁 8 Views

DoS in Django via check_for_language() when given many long language codes.

Reporter	Title	Published	Views	Family All 60
attackerkb	CVE-2026-15337	4 Aug 202615:48	–	attackerkb
AlpineLinux	CVE-2026-15337	4 Aug 202615:48	–	alpinelinux
BDU FSTEC	Django check_for_language() DoS	2 Nov 202600:00	–	bdu_fstec
Circl	CVE-2026-15337	4 Aug 202616:29	–	circl
CVE	CVE-2026-15337	4 Aug 202615:48	–	cve
Cvelist	CVE-2026-15337 Potential denial-of-service vulnerability in check_for_language()	4 Aug 202615:48	–	cvelist
Debian	[SECURITY] [DLA 4736-1] python-django security update	12 Aug 202621:14	–	debian
Debian CVE	CVE-2026-15337	4 Aug 202615:48	–	debiancve
Tenable Nessus	Debian dla-4736 : python-django-doc - security update	12 Aug 202600:00	–	nessus
Tenable Nessus	Fedora 44 : python-django5 (2026-301e6e2983)	18 Sep 202600:00	–	nessus

Vulners

Node

OR

djangoproject djangoRange5.2–5.2.17

djangoproject djangoRange6.0–6.0.8

Source	Link
github	www.github.com/django/django/
github	www.github.com/django/django/commit/224dbc832586ad5cfb0237c2ff30d14baeaddc6f
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-15337
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/15xxx/CVE-2026-15337.json
github	www.github.com/django/django/commit/5b3523d29be25948e1dd90b3863a002f00fc865f
groups	www.groups.google.com/g/django-announce
pypi	www.pypi.org/project/Django/
github	www.github.com/django/django/commit/27137e655e442e81095f1f8f77ff3870d9fdf169
github	www.github.com/django/django/commit/c72a5dbb64d0777f3f471f1be94e8b2ca91e0959
djangoproject	www.djangoproject.com/weblog/2026/aug/04/security-releases/

08 Oct 2026 00:07Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.15.3

CVSS 46.9

EPSS0.0059

SSVC

Django check_for_language()set_language()denial-of-service memory consumption