CVE-2025-14550

🗓️ 03 Feb 2026 20:01:58Reported by redhat.comType

redhatcve

redhatcve🔗 access.redhat.com👁 4 Views

Django vulnerability CVE-2025-14550 enables denial of service via duplicate headers to ASGIReq.

Reporter	Title	Published	Views	Family All 112
IBM Security Bulletins	Security Bulletin: Enumeration of users, compromised data confidentiality and integrity, and other vulnerabilities might affect IBM Storage Defender - Resiliency Service	23 Mar 202616:22	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Edge Data Collector uses django-4.2.27-py3-none-any.whl which is vulnerable to CVE-2025-13473, CVE-2025-14550, CVE-2026-1207, CVE-2026-1285, CVE-2026-1287, CVE-2026-1312.	30 Mar 202607:02	–	ibm
ATTACKERKB	CVE-2025-14550	3 Feb 202614:38	–	attackerkb
AlpineLinux	CVE-2025-14550	3 Feb 202614:38	–	alpinelinux
BDU FSTEC	The vulnerability of the Django web application software platform, related to algorithmic complexity, allows attackers to trigger service failures.	23 Mar 202600:00	–	bdu_fstec
Chainguard	CVE-2025-14550 vulnerabilities	5 Feb 202601:17	–	cgr
Circl	CVE-2025-14550	3 Feb 202615:53	–	circl
CNNVD	Django 安全漏洞	3 Feb 202600:00	–	cnnvd
CVE	CVE-2025-14550	3 Feb 202614:38	–	cve
Cvelist	CVE-2025-14550 Potential denial-of-service vulnerability via repeated headers when using ASGI	3 Feb 202614:38	–	cvelist

Source	Link
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-14550
docs	www.docs.djangoproject.com/en/dev/releases/security/
groups	www.groups.google.com/g/django-announce
djangoproject	www.djangoproject.com/weblog/2026/feb/03/security-releases/
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

12 Feb 2026 22:34Current

5.1Medium risk

Vulners AI Score5.1

CVSS 3.17.5

EPSS0.00993

SSVC

Django vulnerability Denial of service Duplicate headers ASGI Request Mitigation unavailable