Django 3.2.x < 3.2.20, 4.1.x < 4.1.10, 4.2.x < 4.2.3 ReDoS Vulnerability - Linux

Django is prone to a regular expression denial of service ReDoS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

UBUNTU-CVE-2023-36053

In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS regular expression denial of service attack via a very large number of domain name labels of emails and URLs...

CVE-2023-36053

In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS regular expression denial of service attack via a very large number of domain name labels of emails and URLs...

aa-charlink (>=0.1.1, <=1.0.0), aa-drifters (0.1.0a0) +283 more potentially affected by CVE-2023-36053 via django (>=4.0.0a1, <=4.1.9)

django PYPI version =4.0.0a1, =0.1.1, =1.0.0b1, =0.1.0a0, =0.11.0a0, =0.1.1, =1.1.0, =0.1.0, =0.0.3, =4.0.9.0, =3.1.1, =3.6.4, =0.10.0, =1.1.2, =1.13.0 and more Source cves: CVE-2023-36053 Source advisory: GHSA-JH3W-4VVF-MJGR...

aa-charlink (>=0.1.1, <=1.0.0), aa-drifters (0.1.0a0) +283 more potentially affected by CVE-2023-36053 via django (>=4.0.0a1, <=4.1.9)

django PYPI version =4.0.0a1, =0.1.1, =1.0.0b1, =0.1.0a0, =0.11.0a0, =0.1.1, =1.1.0, =0.1.0, =0.0.3, =4.0.9.0, =3.1.1, =3.6.4, =0.10.0, =1.1.2, =1.13.0 and more Source cves: CVE-2023-36053 Source advisory: OSV:GHSA-JH3W-4VVF-MJGR...

auth-token-django (>=0.0.1, <=0.0.5), bfactory (>=0.4.0, <=0.4.4) +52 more potentially affected by CVE-2023-36053 via django (>=4.2.0a1, <=4.2.2)

django PYPI version =4.2.0a1, =0.0.1, =0.4.0, =0.0.4.dev0, =5.2.0, =3.1.0, =7.2.2, =39.1.0, =9.3.0, =0.1.0a1, =1.0.0, =1.1.0 and more Source cves: CVE-2023-36053 Source advisory: OSV:GHSA-JH3W-4VVF-MJGR...

auth-token-django (>=0.0.1, <=0.0.5), bfactory (>=0.4.0, <=0.4.4) +52 more potentially affected by CVE-2023-36053 via django (>=4.2.0a1, <=4.2.2)

django PYPI version =4.2.0a1, =0.0.1, =0.4.0, =0.0.4.dev0, =5.2.0, =3.1.0, =7.2.2, =39.1.0, =9.3.0, =0.1.0a1, =1.0.0, =1.1.0 and more Source cves: CVE-2023-36053 Source advisory: GHSA-JH3W-4VVF-MJGR...

admin-tool-button (>=1.0.1a0, <=1.0.5a0), aedttest (>=0.0.1.dev1, <=0.0.2) +164 more potentially affected by CVE-2023-36053 via django (>=3.2.0rc1, <=3.2.19)

django PYPI version =3.2.0rc1, =1.0.1a0, =0.0.1.dev1, =2.0.0, =0.0.1, =1.0.0, =0.0.1, =6.2.0, =0.2.0, =1.0.0b6, =0.1.0, =21.1.1, =22.0.0.dev11 and more Source cves: CVE-2023-36053 Source advisory: OSV:GHSA-JH3W-4VVF-MJGR...

admin-tool-button (>=1.0.1a0, <=1.0.5a0), aedttest (>=0.0.1.dev1, <=0.0.2) +164 more potentially affected by CVE-2023-36053 via django (>=3.2.0rc1, <=3.2.19)

django PYPI version =3.2.0rc1, =1.0.1a0, =0.0.1.dev1, =2.0.0, =0.0.1, =1.0.0, =0.0.1, =6.2.0, =0.2.0, =1.0.0b6, =0.1.0, =21.1.1, =22.0.0.dev11 and more Source cves: CVE-2023-36053 Source advisory: GHSA-JH3W-4VVF-MJGR...

Django has regular expression denial of service vulnerability in EmailValidator/URLValidator

In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS regular expression denial of service attack via a very large number of domain name labels of emails and URLs...

GHSA-JH3W-4VVF-MJGR Django has regular expression denial of service vulnerability in EmailValidator/URLValidator

In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS regular expression denial of service attack via a very large number of domain name labels of emails and URLs...

CVE-2023-36053

In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS regular expression denial of service attack via a very large number of domain name labels of emails and URLs...

DEBIAN-CVE-2023-36053

In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS regular expression denial of service attack via a very large number of domain name labels of emails and URLs...

admin-tool-button (>=1.0.1a0, <=1.0.5a0), aedttest (>=0.0.1.dev1, <=0.0.2) +163 more potentially affected by CVE-2023-36053 via django (>=3.2.0, <=3.2.19)

django PYPI version =3.2.0, =1.0.1a0, =0.0.1.dev1, =2.0.0, =0.0.1, =1.0.0, =0.0.1, =6.2.0, =0.2.0, =1.0.0b6, =0.1.0, =21.1.1, =22.0.0.dev11 and more Source cves: CVE-2023-36053 Source advisory: OSV:PYSEC-2023-100...

aa-charlink (>=0.1.1, <=1.0.0), aa-drifters (0.1.0a0) +271 more potentially affected by CVE-2023-36053 via django (>=4.0.0, <=4.1.9)

django PYPI version =4.0.0, =0.1.1, =1.0.0b1, =0.1.0a0, =0.11.0a0, =0.1.1, =1.1.0, =0.1.0, =0.0.3, =4.0.9.0, =3.1.1, =3.6.4, =0.10.0, =1.1.2, =1.13.0 - annalist 0.5.18 and more Source cves: CVE-2023-36053 Source advisory: OSV:PYSEC-2023-100...

Code injection

In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS regular expression denial of service attack via a very large number of domain name labels of emails and URLs...

PYSEC-2023-100

In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS regular expression denial of service attack via a very large number of domain name labels of emails and URLs...

auth-token-django (>=0.0.1, <=0.0.5), bfactory (>=0.4.0, <=0.4.4) +52 more potentially affected by CVE-2023-36053 via django (>=4.2.0, <=4.2.2)

django PYPI version =4.2.0, =0.0.1, =0.4.0, =0.0.4.dev0, =5.2.0, =3.1.0, =7.2.2, =39.1.0, =9.3.0, =0.1.0a1, =1.0.0, =1.1.0 and more Source cves: CVE-2023-36053 Source advisory: OSV:PYSEC-2023-100...

PYSEC-2023-100

In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS regular expression denial of service attack via a very large number of domain name labels of emails and URLs...

aa-charlink (>=0.1.1, <=1.0.0), aa-drifters (0.1.0a0) +283 more potentially affected by CVE-2023-36053 via django (>=4.0.0a1, <=4.1.9)

django PYPI version =4.0.0a1, =0.1.1, =1.0.0b1, =0.1.0a0, =0.11.0a0, =0.1.1, =1.1.0, =0.1.0, =0.0.3, =4.0.9.0, =3.1.1, =3.6.4, =0.10.0, =1.1.2, =1.13.0 and more Source cves: CVE-2023-36053 Source advisory: MEND:CVE-2023-36053...