CVE-2025-64460

A vulnerability exists in Django versions 5.2 before 5.2.9 , 5.1 before 5.1.15 , and 4.2 before 4.2.27 due to algorithmic complexity in the django.core.serializers.xml_serializer.getInnerText() function. A remote attacker can provide specially crafted XML input processed by the XML Deserializer t...

PT-2025-48704

Name of the Vulnerable Software and Affected Versions Django versions 4.2 through 4.2.26 Django versions 5.1 through 5.1.14 Django versions 5.2 through 5.2.8 Description An issue exists in the way Django handles XML input. Specifically, algorithmic complexity within the django.core.serializers.xm...