16024 matches found
aldryn-django (>=5.1.4.0, <=5.1.5.0), app-parcheggi-backup (>=1.0.0, <=1.0.1) +51 more potentially affected by CVE-2025-27556 via django (>=5.1.0, <=5.1.7)
django PYPI version =5.1.0, =5.1.4.0, =1.0.0, =0.2.0, =0.2.0a1, =0.1.6, =0.0.3, =0.1.7, =0.0.15, =2.7.0, =0.92.0, =1.0.0, =2.0.0 and more Source cves: CVE-2025-27556 Source advisory: GHSA-WQFG-M96J-85VM...
Django Potential Denial of Service (DoS) on Windows
An issue was discovered in Django 5.1 before 5.1.8 and 5.0 before 5.0.14. The NFKC normalization is slow on Windows. As a consequence, django.contrib.auth.views.LoginView, django.contrib.auth.views.LogoutView, and django.views.i18n.setlanguage are subject to a potential denial-of-service attack v...
aldryn-django (>=5.0.2.0, <=5.0.11.0), artd-customer (>=0.0.20, <=0.0.23) +78 more potentially affected by CVE-2025-27556 via django (>=5.0.0, <=5.0.13)
django PYPI version =5.0.0, =5.0.2.0, =0.0.20, =0.0.13, =0.0.19, =0.0.34, =0.0.50, =0.0.5, =0.0.11, =1.0.3, =0.1.0, =0.1.0, =1.0.0, =6.0.0, =6.3.3 and more Source cves: CVE-2025-27556 Source advisory: GHSA-WQFG-M96J-85VM...
PYSEC-2025-14
An issue was discovered in Django 5.1 before 5.1.8 and 5.0 before 5.0.14. The NFKC normalization is slow on Windows. As a consequence, django.contrib.auth.views.LoginView, django.contrib.auth.views.LogoutView, and django.views.i18n.setlanguage are subject to a potential denial-of-service attack v...
PYSEC-2025-14
An issue was discovered in Django 5.1 before 5.1.8 and 5.0 before 5.0.14. The NFKC normalization is slow on Windows. As a consequence, django.contrib.auth.views.LoginView, django.contrib.auth.views.LogoutView, and django.views.i18n.setlanguage are subject to a potential denial-of-service attack v...
aldryn-django (>=5.1.4.0, <=5.1.5.0), app-parcheggi-backup (>=1.0.0, <=1.0.1) +51 more potentially affected by CVE-2025-27556 via django (>=5.1.0, <=5.1.7)
django PYPI version =5.1.0, =5.1.4.0, =1.0.0, =0.2.0, =0.2.0a1, =0.1.6, =0.0.3, =0.1.7, =0.0.15, =2.7.0, =0.92.0, =1.0.0, =2.0.0 and more Source cves: CVE-2025-27556 Source advisory: OSV:PYSEC-2025-14...
CVE-2025-27556
An issue was discovered in Django 5.1 before 5.1.8 and 5.0 before 5.0.14. The NFKC normalization is slow on Windows. As a consequence, django.contrib.auth.views.LoginView, django.contrib.auth.views.LogoutView, and django.views.i18n.setlanguage are subject to a potential denial-of-service attack v...
aldryn-django (>=5.0.2.0, <=5.0.11.0), artd-customer (>=0.0.20, <=0.0.23) +78 more potentially affected by CVE-2025-27556 via django (>=5.0.0, <=5.0.13)
django PYPI version =5.0.0, =5.0.2.0, =0.0.20, =0.0.13, =0.0.19, =0.0.34, =0.0.50, =0.0.5, =0.0.11, =1.0.3, =0.1.0, =0.1.0, =1.0.0, =6.0.0, =6.3.3 and more Source cves: CVE-2025-27556 Source advisory: OSV:PYSEC-2025-14...
aldryn-django (>=5.0.2.0, <=5.0.11.0), artd-customer (>=0.0.20, <=0.0.23) +78 more potentially affected by CVE-2025-27556 via django (>=5.0.0, <=5.0.13)
django PYPI version =5.0.0, =5.0.2.0, =0.0.20, =0.0.13, =0.0.19, =0.0.34, =0.0.50, =0.0.5, =0.0.11, =1.0.3, =0.1.0, =0.1.0, =1.0.0, =6.0.0, =6.3.3 and more Source cves: CVE-2025-27556 Source advisory: MEND:CVE-2025-27556...
aldryn-django (>=5.1.4.0, <=5.1.5.0), app-parcheggi-backup (>=1.0.0, <=1.0.1) +51 more potentially affected by CVE-2025-27556 via django (>=5.1.0, <=5.1.7)
django PYPI version =5.1.0, =5.1.4.0, =1.0.0, =0.2.0, =0.2.0a1, =0.1.6, =0.0.3, =0.1.7, =0.0.15, =2.7.0, =0.92.0, =1.0.0, =2.0.0 and more Source cves: CVE-2025-27556 Source advisory: MEND:CVE-2025-27556...
CVE-2025-27556
Django 5.1 before 5.1.8 and 5.0 before 5.0.14 are affected by a Windows‑specific DoS due to slow NFKC normalization. Vulnerable components include django.contrib.auth.views.LoginView/LogoutView and django.views.i18n.set_language, as well as redirect handling that normalizes URLs. Patches are avai...
CVE-2025-27556
An issue was discovered in Django 5.1 before 5.1.8 and 5.0 before 5.0.14. The NFKC normalization is slow on Windows. As a consequence, django.contrib.auth.views.LoginView, django.contrib.auth.views.LogoutView, and django.views.i18n.setlanguage are subject to a potential denial-of-service attack v...
Django security vulnerabilities
Django is a set of open source web application frameworks based on the Python language from the Django Foundation. The framework includes an object-oriented mapper, view system, template system, and more. A security vulnerability exists in Django versions 5.1 prior to 5.1.8 and 5.0 prior to 5.0.1...
CVE-2025-27556
An issue was discovered in Django 5.1 before 5.1.8 and 5.0 before 5.0.14. The NFKC normalization is slow on Windows. As a consequence, django.contrib.auth.views.LoginView, django.contrib.auth.views.LogoutView, and django.views.i18n.setlanguage are subject to a potential denial-of-service attack v...
PT-2025-14483
Name of the Vulnerable Software and Affected Versions Django versions 5.1 before 5.1.8 Django versions 5.0 before 5.0.14 Description An issue was discovered where the NFKC normalization is slow on Windows, making certain views subject to a potential denial-of-service attack via certain inputs wit...
CVE-2025-27556: Allocation of Resources Without Limits or Throttling
An issue was discovered in Django 5.1 before 5.1.8 and 5.0 before 5.0.14. The NFKC normalization is slow on Windows. As a consequence, django.contrib.auth.views.LoginView, django.contrib.auth.views.LogoutView, and django.views.i18n.setlanguage are subject to a potential denial-of-service attack v...
CVE-2025-27556
An issue was discovered in Django 5.1 before 5.1.8 and 5.0 before 5.0.14. The NFKC normalization is slow on Windows. As a consequence, django.contrib.auth.views.LoginView, django.contrib.auth.views.LogoutView, and django.views.i18n.setlanguage are subject to a potential denial-of-service attack v...
CVE-2025-27556
An issue was discovered in Django 5.1 before 5.1.8 and 5.0 before 5.0.14. The NFKC normalization is slow on Windows. As a consequence, django.contrib.auth.views.LoginView, django.contrib.auth.views.LogoutView, and django.views.i18n.setlanguage are subject to a potential denial-of-service attack v...
