admin-tool-button (>=1.0.1a0, <=1.0.5a0), aedttest (>=0.0.1.dev1, <=0.0.2) +165 more potentially affected by CVE-2023-43665 via django (>=3.2.0, <=3.2.21)

django PYPI version =3.2.0, =1.0.1a0, =0.0.1.dev1, =2.0.0, =0.0.1, =1.0.0, =0.0.1, =6.2.0, =0.2.0, =1.0.0b6, =0.1.0, =21.1.1, =22.0.0.dev11 and more Source cves: CVE-2023-43665 Source advisory: OSV:PYSEC-2023-226...

admin-tool-button (>=1.0.1a0, <=1.0.5a0), aedttest (>=0.0.1.dev1, <=0.0.2) +164 more potentially affected by CVE-2023-41164 via django (>=3.2.0, <=3.2.20)

django PYPI version =3.2.0, =1.0.1a0, =0.0.1.dev1, =2.0.0, =0.0.1, =1.0.0, =0.0.1, =6.2.0, =0.2.0, =1.0.0b6, =0.1.0, =21.1.1, =22.0.0.dev11 and more Source cves: CVE-2023-41164 Source advisory: OSV:PYSEC-2023-225...

PYSEC-2023-225

In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uritoiri is subject to a potential DoS denial of service attack via certain inputs with a very large number of Unicode characters...

Design/Logic Flaw

In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uritoiri is subject to a potential DoS denial of service attack via certain inputs with a very large number of Unicode characters...

django-leaflet-storage (0.8.0b0), heatmappy (>=0.2.0, <=0.2.6) +3 more potentially affected by CVE-2023-44271 via pillow (3.0.0)

pillow PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - django-leaflet-storage 0.8.0b0 - heatmappy =0.2.0, =0.1.4, =0.1.14 - swmmio 0.2.1 - wsy-captcha 1.0.0 Source cves: CVE-2023-44271 Source advisory:...

Denial Of Service (DoS)

Django is vulnerable to Denial Of Service DoS. The vulnerability exists in the topython functionality within the UsernameField class of forms.py. It fails to implement a maximum length check for the NFKC normalization, which allows an attacker to potentially crash the application on Windows by...

CVE-2023-41164

In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uritoiri is subject to a potential DoS denial of service attack via certain inputs with a very large number of Unicode characters...

CVE-2023-43665

In Django 3.2 before 3.2.22, 4.1 before 4.1.12, and 4.2 before 4.2.6, the django.utils.text.Truncator chars and words methods when used with html=True are subject to a potential DoS denial of service attack via certain inputs with very long, potentially malformed HTML text. The chars and words...

CVE-2023-41164

In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uritoiri is subject to a potential DoS denial of service attack via certain inputs with a very large number of Unicode characters...

afex-devtools (>=0.1.0, <=0.32.0), alastria-auth (>=0.0.3, <=0.0.17) +57 more potentially affected by CVE-2023-41164 via django (>=4.1.0, <=4.1.10)

django PYPI version =4.1.0, =0.1.0, =0.0.3, =0.6.3, =1.0.0, =0.1.1, =0.0.3, =0.1.0, =1.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.2 and more Source cves: CVE-2023-41164 Source advisory: MEND:CVE-2023-41164...

admin-tool-button (>=1.0.1a0, <=1.0.5a0), aedttest (>=0.0.1.dev1, <=0.0.2) +164 more potentially affected by CVE-2023-41164 via django (>=3.2.0, <=3.2.20)

django PYPI version =3.2.0, =1.0.1a0, =0.0.1.dev1, =2.0.0, =0.0.1, =1.0.0, =0.0.1, =6.2.0, =0.2.0, =1.0.0b6, =0.1.0, =21.1.1, =22.0.0.dev11 and more Source cves: CVE-2023-41164 Source advisory: MEND:CVE-2023-41164...

CVE-2023-41164

CVE-2023-41164 affects Django versions where uri_to_iri() is vulnerable to a DoS via inputs with a vast number of Unicode characters. Affected are Django 3.2 before 3.2.21, Django 4.1 before 4.1.11, and Django 4.2 before 4.2.5. The root cause is described as a potential denial-of-service in djang...

CVE-2023-43665

The CVE-2023-43665 vulnerability affects Django’s Truncator (django.utils.text.Truncator) when html=True, in Django 3.2 before 3.2.22, 4.1 before 4.1.12, and 4.2 before 4.2.6. The chars() and words() methods used by truncatechars_html and truncatewords_html can exhibit DoS behavior due to regular...

CVE-2023-43665

In Django 3.2 before 3.2.22, 4.1 before 4.1.12, and 4.2 before 4.2.6, the django.utils.text.Truncator chars and words methods when used with html=True are subject to a potential DoS denial of service attack via certain inputs with very long, potentially malformed HTML text. The chars and words...

CVE-2023-43665

In Django 3.2 before 3.2.22, 4.1 before 4.1.12, and 4.2 before 4.2.6, the django.utils.text.Truncator chars and words methods when used with html=True are subject to a potential DoS denial of service attack via certain inputs with very long, potentially malformed HTML text. The chars and words...

CVE-2023-43665

In Django 3.2 before 3.2.22, 4.1 before 4.1.12, and 4.2 before 4.2.6, the django.utils.text.Truncator chars and words methods when used with html=True are subject to a potential DoS denial of service attack via certain inputs with very long, potentially malformed HTML text. The chars and words...

CVE-2023-43665: Improper Validation of Specified Quantity in Input

In Django 3.2 before 3.2.22, 4.1 before 4.1.12, and 4.2 before 4.2.6, the django.utils.text.Truncator chars and words methods when used with html=True are subject to a potential DoS denial of service attack via certain inputs with very long, potentially malformed HTML text. The chars and words...

admin-auth0 (>=0.1.1, <=0.1.5), alcali (3006.3.0) +69 more potentially affected by CVE-2023-43665 via django (>=4.2.0a1, <=4.2.5)

django PYPI version =4.2.0a1, =0.1.1, =7.5.0a0, =0.0.1, =0.4.0, =0.0.4.dev0, =5.2.0, =0.9.0, =26.3.0, =3.1.0, =7.2.2, =39.1.0, =23.1.0, =9.3.0, =9.3.1 and more Source cves: CVE-2023-43665 Source advisory: MEND:CVE-2023-43665...

admin-tool-button (>=1.0.1a0, <=1.0.5a0), aedttest (>=0.0.1.dev1, <=0.0.2) +166 more potentially affected by CVE-2023-43665 via django (>=3.2.0rc1, <=3.2.21)

django PYPI version =3.2.0rc1, =1.0.1a0, =0.0.1.dev1, =2.0.0, =0.0.1, =1.0.0, =0.0.1, =6.2.0, =0.2.0, =1.0.0b6, =0.1.0, =21.1.1, =22.0.0.dev11 and more Source cves: CVE-2023-43665 Source advisory: MEND:CVE-2023-43665...

afex-devtools (>=0.1.0, <=0.32.0), alastria-auth (>=0.0.3, <=0.0.17) +57 more potentially affected by CVE-2023-43665 via django (>=4.1.0a1, <=4.1.11)

django PYPI version =4.1.0a1, =0.1.0, =0.0.3, =0.6.3, =1.0.0, =0.1.1, =0.0.3, =0.1.0, =1.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.2 and more Source cves: CVE-2023-43665 Source advisory: MEND:CVE-2023-43665...