kodland-sso-server (>=0.1.1, <=0.3.0) potentially affected by CVE-2025-64458 via django (2.0.1)

django PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - kodland-sso-server =0.1.1, =0.3.0 Source cves: CVE-2025-64458 Source advisory: OSV:GHSA-QW25-V68C-QJF3...

11x-wagtail-blog (>=0.0.0, <=0.2.0), aldryn-django (>=5.0.2.0, <=5.1.5.0) +291 more potentially affected by CVE-2025-64458 via django (>=5.0.0a1, <=5.1.13)

django PYPI version =5.0.0a1, =0.0.0, =5.0.2.0, =0.0.15, =1.0.0, =1.14.3, =0.0.20, =0.0.13, =0.0.19, =0.0.34, =0.0.50, =0.0.5, =0.0.11, =1.0.3, =1.0.4 and more Source cves: CVE-2025-64458 Source advisory: GHSA-QW25-V68C-QJF3...

aedttest (>=0.0.1.dev1, <=0.0.1), autoreduce-db (>=22.0.0.dev12, <=22.0.0.dev20) +12 more potentially affected by CVE-2025-64458 via django (3.2.8)

django PYPI version 3.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aedttest =0.0.1.dev1, =22.0.0.dev12, =22.0.0.dev6, =22.0.0.dev12, =22.0.0.dev10, =22.0.0.dev17, =4.0.1, =0.1.0, =0.3.6, =0.3.6,...

aimmo (>=2.4.4, <=2.5.8), arches (>=6.2.0, <=7.3.0) +12 more potentially affected by CVE-2025-64458 via django (3.2.15)

django PYPI version 3.2.15 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aimmo =2.4.4, =6.2.0, =6.17.1, =6.17.1, =21.5.0, =4.3.0, =4.0.0, =0.6.6, =4.2.0, =1.1.0, =5.4.1, =5.5.2 Source cves: CVE-2025-64458 Source advisory...

aimmo (2.5.12), aldryn-django (3.2.17.0) +9 more potentially affected by CVE-2025-64458 via django (3.2.17)

django PYPI version 3.2.17 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aimmo 2.5.12 - aldryn-django 3.2.17.0 - cfl-common =6.29.1, =6.29.1, =0.104.1, =0.7.3, =3.7.6, =5.8.2, =0.6.0, =0.8.0, =0.8.1 Source cves:...

django-hookup (0.0.1), drf-compose (>=0.1.0, <=0.1.1) +7 more potentially affected by CVE-2025-64458 via django (3.2.7)

django PYPI version 3.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-hookup 0.0.1 - drf-compose =0.1.0, =10.3.999, =0.0.3, =1.0.1, =0.1.4.3, =0.1.6.2, =0.22.0, =0.23.0 Source cves: CVE-2025-64458 Source advisor...

docker-compose-control-center (>=2.4.0, <=3.0.0) potentially affected by CVE-2025-64458 via django (2.1.8)

django PYPI version 2.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - docker-compose-control-center =2.4.0, =3.0.0 Source cves: CVE-2025-64458 Source advisory: OSV:GHSA-QW25-V68C-QJF3...

aimmo (>=2.0.4, <=2.4.0), cfl-common (>=6.4.2, <=6.12.4) +22 more potentially affected by CVE-2025-64458 via django (3.2.13)

django PYPI version 3.2.13 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aimmo =2.0.4, =6.4.2, =6.4.2, =4.0.0rc0, =3.7.1, =4.1.0, =2.0.3, =1.0.1, =1.0.0, =1.0.2 and more Source cves: CVE-2025-64458 Source advisory:...

edc (>=0.3.14, <=0.3.16), thenewboston-ml-dev (0.2.3) potentially affected by CVE-2025-64458 via django (3.1.8)

django PYPI version 3.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - edc =0.3.14, =0.3.16 - thenewboston-ml-dev 0.2.3 Source cves: CVE-2025-64458 Source advisory: OSV:GHSA-QW25-V68C-QJF3...

caluma (5.6.0), django-covid19 (>=0.3.0a0, <=0.4.0b1) +6 more potentially affected by CVE-2025-64458 via django (2.2.12)

django PYPI version 2.2.12 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - caluma 5.6.0 - django-covid19 =0.3.0a0, =0.2.1, =2.2.2, =0.9.7, =0.1.3, =0.30.7 Source cves: CVE-2025-64458 Source advisory: OSV:GHSA-QW25-V68C-QJF...

aimmo (>=0.61.9b59, <=0.67.1b256), caluma (6.7.0) +8 more potentially affected by CVE-2025-64458 via django (2.2.17)

django PYPI version 2.2.17 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aimmo =0.61.9b59, =4.15.0, =4.15.0, =0.0.8, =2.5.1, =1.24.11, =1.24.13 - umap-project 1.2.3 Source cves: CVE-2025-64458 Source advisory:...

aistudio-scheduler-lock (>=1.0.0, <=1.0.5), autoreduce-db (>=22.0.0.dev7, <=22.0.0.dev11) +11 more potentially affected by CVE-2025-64458 via django (3.2.6)

django PYPI version 3.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aistudio-scheduler-lock =1.0.0, =22.0.0.dev7, =22.0.0.dev7, =22.0.0.dev14, =0.0.1, =2.2.2, =0.1.0, =0.0.1, =1.0.0 - schedulerlock 0.1.4 - terra-cola...

DEBIAN-CVE-2025-64458

An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8. NFKC normalization in Python is slow on Windows. As a consequence, django.http.HttpResponseRedirect, django.http.HttpResponsePermanentRedirect, and the shortcut django.shortcuts.redirect were subject to a...

arthexis (>=0.1.3, <=0.1.30), cdm-ecommerce-backend (0.1.0) +45 more potentially affected by CVE-2025-64458 via django (>=5.2.0, <=5.2.7)

django PYPI version =5.2.0, =0.1.3, =0.1.0, =0.1.0, =1.3.0, =0.1.0, =2025.7.0, =1.5.7, =1.0.3, =1.2.0 and more Source cves: CVE-2025-64458 Source advisory: OSV:PYSEC-2025-107...

aldryn-django (>=5.1.4.0, <=5.1.5.0), app-parcheggi-backup (>=1.0.0, <=1.0.1) +57 more potentially affected by CVE-2025-64458 via django (>=5.1.0, <=5.1.13)

django PYPI version =5.1.0, =5.1.4.0, =1.0.0, =0.2.0, =0.2.0a1, =8.6.1, =0.1.6, =0.26.0, =8.6.2, =0.0.3, =0.1.7, =0.0.15, =2.7.0, =2.8.0 and more Source cves: CVE-2025-64458 Source advisory: OSV:PYSEC-2025-107...

CVE-2025-64458

An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8. NFKC normalization in Python is slow on Windows. As a consequence, django.http.HttpResponseRedirect, django.http.HttpResponsePermanentRedirect, and the shortcut django.shortcuts.redirect were subject to a...

CVE-2025-64458

creationtimestamp| type| source ---|---|--- 2025-11-05 14:33:40+00:00| seen| https://seclists.org/oss-sec/2025/q4/147 2025-11-05 16:48:18+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m4vivmdsys2h 2025-11-05 20:08:20+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2025-64458

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8. NFKC normalization in Python is slow on Windows. As a consequence,...