Lucene search
+L

1 matches found

OSV
OSV
added 2025/12/02 6:30 p.m.4 views

GHSA-VRCR-9HJ9-JCG6 Django is vulnerable to DoS via XML serializer text extraction

An issue was discovered in 5.2 before 5.2.9, 5.1 before 5.1.15, and 4.2 before 4.2.27. Algorithmic complexity in django.core.serializers.xmlserializer.getInnerText allows a remote attacker to cause a potential denial-of-service attack triggering CPU and memory exhaustion via specially crafted XML...

6.3CVSS7.1AI score0.0219EPSS
SaveExploits0References10
Rows per page
Query Builder